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Advanced  manned  and  unmanned  air-vehicles  have  to  comply  with  sophisticated  performance  requirements.  For  this 
reason,  the  corresponding  guidance  and  control  systems  are  becoming  increasingly  complex.  In  addition,  modem  manned 
and  unmanned  weapon  systems  are  assuming  an  increasing  tactical/operational  importance  and  demand  higher  percentages 
of  the  relevant  budgets.  Procurement  agencies  are  thus  faced  with  the  problem  of  rapidly  increasing  costs  for  urgently  needed 
systems.  If  this  trend  continues,  new  systems  will  not  be  affordable  in  required  quantities. 

On  the  other  hand,  considerable  progress  has  been  made  in  relevant  technologies:  signal-processing  (hardware  and 
software),  low-cost  sensors,  means  for  positioning  and  updating,  etc.  Further  advances  can  be  expected  in  the  future. 

For  this  purpose,  the  Guidance  and  Control  Panel  is  directing  its  efforts  towards  the  application  of  available  technology 
to  the  design,  operation,  maintenance  and  testing  of  cost-effective  and  affordable  guidance  and  control  systems. 

In  order  to  perform  this  objective,  the  symposium  has  been  arranged  as  follows:  cost-effectiveness  models;  system 
configurations  and  design  tools;  low-cost  guidance  and  control  sensors;  computational  techniques  and  data  processing: 
reduction  of  development  and  support  costs;  examples  of  cost-effective  achievements  and  approaches. 

The  symposium  concluded  with  a  Round  Table  Discussion  in  which  Panel  members,  speakers,  and  other  attendees 
participated. 


Les  vehicules  aeriens,  pilotes  ou  non,  doivent  se  conformcr  a  des  exigences  complexes  dc  performance.  De  ce  fait,  les 
systemes  correspondants  de  guidage  et  de  pilotage  deviennenl  dc  plus  cn  plus  sophistiques.  En  outre,  les  systemes  d'armes. 
pilotes  ou  non,  revetent  une  importance  grandissante  aux  plans  tactique  et  opcrationnel.  ct  requierent,  des  budgets 
appropries,  des  pourccntages  plus  eleves.  Les  organismes  charges  de  leur  fmirniturc  sonl  done  confronies  au  probleme  d'un 
accroissement  des  couts  pour  des  systemes  dont  la  necessite  s’impose  avee  urgence.  Si  cctte  tendance  se  poursuit,  il  no  sera 
pas  possible  dc  se  procurer  les  nouveaux  systemes  en  nombre  sufftsant. 

D'autre  part,  des  progres  considerables  ont  ete  realises  dans  les  domaincs  tcchnologiqucs  conccrnes:  traitement  des 
signaux  (materiel  et  logicicl),  dclecteur  de  cout  modique,  moyens  dc  positionnement  et  dc  mise  a  jour,  etc.  On  peut 
escompter  que  d'autres  progres  seront  realises  a  l  avenir. 

Dans  ce  but,  le  Panel  de  Guidage  et  Pilotage  centre  ses  efforts  sur  ('application  dc  la  technologic  cxistantc  a  la 
conception,  au  fonctionnement,  a  la  maintenance  et  aux  essais  de  systemes  dc  guidage  et  dc  pilotage  presentant  un  rapport 
cout-efficacite  satisfaisant  ct  accessible  aux  usagers. 

Pour  repondre  a  cet  objectif,  le  symposium  a  ete  divise  suivant  different*  themes:  modclcs  de  cout-efficacite; 
configurations  dcs  systemes  et  instruments  conceptuels;  detecteurs  de  cout  modique  pour  le  guidage  et  le  pilotage: 
techniques  dc  calcul  et  de  traitement  de  donnees;  reduction  des  couts  de  souticn  ct  dc  dcveloppcmcnl;  exemples  de 
realisations  ct  d'approches  presentant  un  rapport  cout-efficacite  satisfaisant. 


Le  symposium  s'est  termine  par  une  “Table  Ronde"  a  laqucllc  ont  pris  part  les  membres  du  Panel,  les  confcrencicrs  et 
les  autres  participants. 
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TECHNICAL  EVALUATION  REPORT 


by 

C.Baron,  M.Sc. 

Head,  CM  (s)  I/SAS 
Room  22 1  Ministry  of  Defence 
Savoy  Hill  House,  Savoy  Hill 
London.  UK 


1.  INTRODUCTION 

The  39th  Symposium  of  the  Guidance  and  Control  Panel  of  AG  ARD  was  held  at  the  Altin  Yunus  Hotel,  C'c$me, 
Turkey,  from  the  16th  to  19th  October,  1984.  The  Programme  Chairman  was  Mr  U.K.Krogmann  of  Bodenseewerk, 
FRN-EN,  Oberlingen,  Federal  Republic  of  Germany.  The  meeting  was  attended  by  upwards  of  1 1 0  people,  among  whom 
the  US,  UK,  FRG,  France  and  the  host  nation  Turkey  had  relatively  large  and  roughly  comparable  participation:  12  nations 
in  all  being  represented. 


2.  THEME  AND  OBJECTIVES 

The  steady  and  universal  increase  in  defence  equipment  costs  documented  in  the  Keynote  Address  was  relatively  easy 
for  national  economies  to  bear  in  the  period  of  high  economic  growth  following  World  War  II.  but  more  recently,  lower 
growth  has  brought  increasing  difficulty  for  most  nations  even  to  maintain  forces  at  current  strengths.  Conscious  as  they  were 
of  the  urgent  need  to  tackle  this  most  important  problem,  it  was  nevertheless  a  bold  step  by  the  Guidance  and  Control  Panel 
to  organise  this  symposium,  for  the  drive  to  reduce  costs  is  mistakenly  regarded  by  too  many  in  the  scientific  and  technical 
community  as  an  unwelcome  restraint  on  progress.  The  part  played  by  this  meeting  in  dispelling  this  impression  must  have 
been  sufficient  justification  in  itself.  It  is  easy  to  show  that  if  participation  in  the  conference  generated  a  single  idea  capable  of 
saving  1%  of  the  cost  of  a  major  defence  programme,  that  saving  could  exceed  the  total  cost  of  the  symposium  by  two  orders 
of  magnitude. 

The  theme  of  the  meeting  was  stated  by  the  organisers  as  "the  application  of  available  technology  to  the  design, 
operation,  maintenance  and  testing  of  cost-effective  and  affordable  guidance  and  control  systems".  It  w  as  particularly 
appropriate  that  this  theme  was  thus  developed  in  a  country  with  a  strong  interest  in  low  cost  equipment.  In  addition  a 
Special  Session  was  organised,  at  the  request  of  Turkey,  on  'Slrapdown  gyros  and  accelerometers',  w  hich  w  as  highly 
appreciated  by  the  Turkish  participants;  since  it  was  not  part  of  the  symposium,  however  it  w  ill  not  be  further  referred  to 
here. 


3.  TECHNICAL  CONTENT 

The  meeting  opened  with  an  Address  of  Welcome  by  Col  Kaya  of  the  Turkish  Air  Force,  who  emphasised  his  nation's 
interest  in.  anil  welcome  for  the  meeting.  This  was  followed  by  the  Keynote  Address,  given  y  the  writer,  which  sought  to 
establish  beyond  doubt  the  vital  need  for  adopting  all  possible  means  of  reducing  costs,  including  harnessing  technological 
innovation  for  the  purpose. 


Session  I  Cost  effectiveness  models/ systems  configuration  and  design  tools. 

In  the  first  paper  ( I )  Hotter  showed  that,  since  maintenance  accounts  for  by  far  the  greatest  proportion  ol  life  cycle 
costs,  much  thought,  and  if  necessary  extra  cost,  should  be  given  in  the  development  phase  to  reducing  maintenance  costs. 
Reviewing  the  various  aspects  of  flight  control  system  design,  he  indicated  several  approaches  to  achieve  this.  1  his  was  a 
well- presented  and  thoughtful  paper  which  gave  the  conference  a  good  start  and  provoked  some  .alive  discussion  which 
emphasised  the  need  to  avoid  unnecessary  over-specification. 

(iiven  the  very  wide  range  of  costs  of  inertial  navigation  systems,  depending  on  llu-  aceiii.u  \  required,  it  mas  be 
possible  to  design  a  cheaper  system  overall  by  augmenting  IN  information  with  data  born  othei  ant'  moiuous  sources,  such  as 
magnetic  or  Doppler  I  .avnipicrrc  (2)  introduced  a  formalised  technique  for  arriving  at  die  optimum  cl  soliitu  m  usine 
charts  relating  performance  parameters  to  cost,  anil  allowing  the  ilillcinii!  i  haraileiisiu  s  ot  the  dit tv' lent  sensors  to  Ire 
aee<  united  for. 
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Hamlin  (3)  also  dealt  with  navigation  systems,  though  on  a  broader  basis,  giving  an  interesting  i  eview  of  the  options  and 
their  cost  implications,  while  warning  that  breakthroughs  in  this  well  developed  field  seem  unlikely;  the  most  notable  recent 
development  had  been  the  considerable  improvement  in  inertial  sensor  reliability  arising  from  the  introduction  of  laser 
gyros. 

In  the  unfortunate  absence  of  the  next  scheduled  speaker.  Mr  M.A.Gstgaard,  Chief  Scientist.  AFWAL/FIG,  Wright 
Patterson  AFB,  Dayton,  Ohio,  USA,  nobly  volunteered  to  speak  on  a  related  topic.  His  many  friends  w  ere  less  than 
surprised  to  find  that  he  happened  to  have  a  suitable  set  of  vugraphs  with  him.  Since  his  presentation  was  impromptu  it  is  not 
reproduced  in  the  proceedings  and  a  more  detailed  resume  is  therefore  given  here.  He  gave  what  was  essentially  a  report  of 
progress  in  several  Flight  Dynamics  Lab  programmes  in  the  system  integration  and  flight  control  field.  At  present  the  pilot 
has  the  task  of  integrating  the  many  sub  systems  in  the  aircraft,  notably  flight  control,  propulsion,  fire  control  and  navigation, 
leading  to  his  being  overloaded,  particularly  in  crucial  combat  or  failure  situations,  with  adverse  effects  both  on  capability 
and  safety.  The  experimental  Multi  Function  Flight  Control  Reference  System  (MFCRS)  installed  in  an  FI5A  aircraft  is  one 
step  being  taken  towards  greater  integration,  aiming  to  replace  the  separate  inertial  sensors  of  the  navigation,  (light  control, 
and  fire  control  systems  by  an  integrated  set  meeting  all  the  separate  requirements.  The  system  is  based  on  two  sets  of  three 
skew-mounted  ring  laser  gyros,  whose  reliability  is  largely  responsible  for  a  2 1  %  projected  reduction  in  life  cycle  costs. 
Other  advantages  arc  reduced  weight  (by  25%)  and  volume,  80%  improvement  in  survivability  and  50%  in  reaction  time. 
The  system  is  now  installed  and  in  flight  test.  The  two  gyropacks  arc  separated  for  survivability,  one  being  placed  close  to  the 
radar  to  minimise  foresighting  errors,  and  the  other  behind  the  pilot's  seat.  This  displacement,  under  bending  of  the  fuselage, 
had  caused  discrepancies  making  it  necessary  to  raise  the  trip  levels  registering  disagreement  of  the  sensors,  so  as  to  reduce 
false  alarms  in  redundancy  management;  however,  it  had  been  demonstrated  that  faults  would  still  be  correctly  identified  and 
isolated.  Flight  tests  had  shown  acceptable  flight  control  at  low  dynamic  pressures,  but  low  damping  was  evident  in  all  three 
axes  on  going  to  higher  dynamic  pressures;  this  will  require  the  introduction  of  a  better  structural  model.  So  far  the 
conclusion  is  that  the  concept  is  very  promising  but  the  system  needs  more  detailed  development;  reliability  in  practice  had 
been  impressive.  The  second  programme  described  as  the  application  of  the  ADA  high  level  language  to  the  FI  5  digital  flight 
control  system,  which  has  reached  35  k  ft  and  M  0.9,  to  50  k  ft  and  M  2.2.  The  system  is  a  simple  replacement  of  the  original 
analogue  computers  by  digital  computers,  in  fact  Zilog  Z  8()02's.  In  comparison  with  floating  point  assembly  language  it  had 
been  found  that  either  Pascal  or  ADA  required  a  memory  expansion  by  1.30,  and  time  expansion  by  1.10.  However, 
programming  hours  required  were  in  the  ratio  fixed  point  assembly  language  1 .0:  floating  point  assembly  language  0.4:  ADA 
0.2.  Thus  in  both  of  (he  programmes  described,  key  stages  on  the  road  to  greater  system  integration  were  show  n  to  offer  real 
cost  benefits. 

The  next  two  papers  (Habayeb,  4  and  Amoia  and  Somma.  5)  both  described  somewhat  academic  approaches  to  the 
estimation/calculation  of  system  effectiveness.  The  latter  paper,  delivered  by  Somma  raised  the  interesting  question  of 
reliability  estimation  where  the  order  in  which  internal  failures  occur  may  affect  the  outcome,  and  showed  how  to  account  for 
this. 

In  a  return  to  the  practical,  Murgue  and  Evrard  (6)  jointly  described  the  design  of  an  air-launched  laser  guided 
glidebomb  system  for  the  attack  of  missile  launching  fast  patrol  boats.  A  particularly  interesting  feature  was  the  extent  to 
which  designers  had  succeeded  in  interacting  with  the  French  Air  Staff  to  ensure  that  the  requirements  were  adjusted  to 
allow  the  most  cost-effective  solution;  a  situation  envied  by  many  equipment  designers  in  the  audience.  The  presentation  w  as 
illustrated  by  films  showing  the  aircraft  displays  in  operation,  and  the  successful  flight  trials  by  the  bomb. 

The  next  presentation  (Capitano,  7)  was  an  object  lesson  in  how  not  to  address  a  multi  lingual  audience,  the  rate  of 
delivery  making  interpretation  impossible,  and  there  were  far  too  many  slides.  To  those  understanding  English,  however,  it 
was  an  impressive  and  indeed  scintillating  talk.  Asserting  that  the  large  proportion  of  defence  budgets  currently  devoted  to 
spares  provision  could  be  reduced  by  a  factor  of  four  by  manufacturing  techniques  to  improve  reliability,  he  went  on  to  show 
how  to  do  it.  The  key  elements  were  high  thermal  and  vibrational  stressing  at  the  lowest  possible  level  of  assembly,  intensive 
use  of  diagnostic  equipment  (electron  microscopes  etc)  to  detect  component  failures  and  find  their  causes,  and  effective 
feedback.  Asked  the  cost  of  the  diagnostic  equipment  required  he  said  it  was  considerable  but  w  ell  justified  by  production 
cost  savings;  however  good  staff  to  operate  it  —  "electronic  pathologists”  were  very  scarce. 

In  the  last  paper  of  the  Session,  Shapiro  (8)  described  the  formal  implementation  of  Design  to -Cost  (D  EC) 
methodology  to  the  development  of  Doppler  navigation  equipment.  In  addition  to  the  necessary  organisation  procedures. 
Computer  Aided  Engineering  (CAE)  was  shown  to  be  an  important  aid.  An  active  discussion  period  clearly  demonstrated 
the  interest  aroused  by  this  paper.  Attention  focussed  on  the  costs  and  benefits  of  implementing  such  a  system;  it  was  stated 
that  it  had  taken  a  year  of  interchange  with  the  customer  to  establish  the  cost  and  perfotinance  requirements,  after  which  the 
procedure  had  probably  added  30%  to  the  development  time,  but  against  this  it  was  estimated  that  there  had  resulted  a  3<r  , 
reduction  in  unit  production  cost.  The  CAE  system  used  had  been  a  fairly  simple  one  which  had  taken  about  4  months  to  get 
into  action,  but  the  author  would  now  advocate  a  more  advanced  system  which  lie  estimated  might  cost  I  —  1 .5  M  S  and 
which  would  lake  ft-  1 2  months  to  implement;  one  of  his  colleagues  however  thought  the  cost  might  be  doubled,  but  both 
agreed  that  this  would  be  well  Worth  while  provided  it  was  used  with  the  D I  < '  methodology  described.  Stress  was  laid  on  the 
benefit  arising  front  the  stimulation  of  continuous  interaction  Iretw'een  ctistomci  and  developer  to  ensure  that  requitements 
were  agreed  which  would  lead  to  the  lowest  cost  equipment  capable  of  satisfy  me  the  upciational  need 

Session  II  —  Low  cost,  high  reliability  guidance  anil  control  sensors 
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sensors.  First,  Resseguier  (9)  described  a  miniature  inertial  navigation  system  for  missile  mid-coursc  guidance,  with  low  cost 
and  volume  and  quick  reaction  as  the  prime  features.  Aiming  to  reduce  inertial  components  to  a  minimum  and  compensate 
for  resulting  imperfections  by  computing,  the  system  was  based  on  the  use  of  three  ingenious  2-axis  dry  tuned  rate  gyros 
from  which,  by  displacement  of  the  centre  of  mass  from  the  axis  of  rotation,  linear  acceleration  could  also  be  obtained.  Mark 
( 1 0)  then  described  a  technique  for  greatly  reducing  the  cost  of  testing  ring  laser  gyros,  in  which  quantisation  noise  normally 
dominates  the  random  walk  errors,  so  that  measurement  of  the  latter  requires  very  long  observation  periods.  The  fast  filter 
method  described  can  reduce  this  time  from  3  hours  to  2  minutes  and  is  considered  to  give  more  reliable  results. 

Conflicting  requirements  have  hitherto  prevented  the  application  of  the  valuable  characterisics  of  the  gas  bearing  to  dry 
tuned  gyros.  Beardmore  (II)  showed  how  the  difficulties  could  be  overcome  by  clever  design  to  produce  a  gyro  with  good 
intermediate  range  performance  at  low  cost.  The  design  is  believed  capable  of  extension  to  IN  system  performance  or  to  even 
smaller  size.  In  answer  to  questions  it  was  stated  that  speed  adjustment  is  used  for  tuning,  only  a  narrow  range  of  adjustment 
being  necessary  with  electronic  compensation.  In  the  next  paper  (12),  given  by  Salaberry,  an  alternative  approach  to  low  cost 
mid  course  missile  guidance  was  described,  in  using  three  ring  laser  gyros  and  three  accelerometers  in  an  orthogonal 
strapdown  configuration  with  mechanical  dither.  The  paper  demonstrates  the  widening  application  of  laser  gyros,  and 
speculates  on  future  advances.  Another  ingenious  approach  to  navigation,  this  lime  for  helicopters,  was  presented  by  Ohaix 
(13);  the  outputs  of  a  3-axis  magnetometer  are  resolved  by  a  vertical  gyro  and  combined  with  doppler  ground  speed,  making 
extensive  use  of  a  computer  for  resolution  compensation  and  calibration.  This  demonstration  of  how  a  set  of  well  recognised 
elements  can  be  assembled  to  give  a  new,  elegant  and  low  cost  solution  aroused  considerable  interest,  discussion  centreing 
on  the  ease  of  flight  test  calibration  of  the  system,  the  extent  to  which  its  use  may  be  limited  to  areas  of  known  magnetic 
variation,  and  possible  future  improvements. 

This  was  a  session  of  considerable  interest  which  showed  that  designers  in  the  navigation  field  arc  well  aware  of  the 
need  to  reduce  costs,  and  are  responding  with  expertise  and  ingenuity. 

Session  III  —  Computational  Techniques  and  Data  Processing 

The  first  paper  of  this  session  (Benoit  1 4)  described  an  investigation  of  modified  air  traffic  control  procedures  to 
provide  greater  aircraft  fuel  economy.  Simulation  and  in-flight  experiments  showed  considerable  promise  of  accuracy  of 
control  of  time  of  arrival,  hence  less  fuel  wastage  in  the  terminal  area,  combined  with  economy  in  the  cruise  and  descent 
phases.  The  paper  gave  rise  to  a  number  of  questions. 

The  previous  presentation  having  shown  that  lack  of  knowledge  of  the  wind  profile  over  the  aircraft  trajectory  remains  a 
major  limitation  to  achieving  better  economy,  it  was  appropriate  that  the  next  paper  (Onken  1 5)  should  tackle  this  question, 
and  it  was  tackled  convincingly.  The  technique  described  uses  known  theoretical  wind  models  in  which  the  parameters  arc 
refined  by  Kalman  filtering,  using  data  measured  in  the  aircraft  and  at  the  landing  site;  very  good  results  Had  been  achieved  in 
flight  tests,  with  satisfactory  prediction  ahead  of  the  aircraft. 

The  redundant  sensors  of  a  fly-by-wire  flight  control  system  are  a  potential  source  of  highly  reliable  information,  and 
Snell  (16)  described  how  this  could  be  used  to  provide  a  measurement  of  aircraft  attitude.  Originally  conceived  as  a 
replacement  for  standby  instruments  and  their  displays,  it  was  shown  that,  in  combination  with  a  3-axis  magnetometer  ( ref 
paper  1 3)  it  could  also  yield  dead  reckoning  navigation,  with  potential  for  combination  w  ith  cither  terrain  matching  or  (il’S 
Navstar  at  lower  cost  than  IN. 

In  a  thoughtful  general  paper  (17),  Price  then  reviewed  the  impact  ol  Very  Large  Scale  Integrated  Circuit  technology  on 
the  system  design  process  and  its  costs,  and  showed  how  Artificial  Intelligence  and  similar  techniques  may  come  to  be 
applied.  Surprisingly,  the  paper,  which  might  have  been  expected  to  give  rise  to  debate,  provoked  none,  presumably  for  lack 
of  experts  in  the  audience.  By  contrast,  the  next  paper  produced  more  discussion  than  any  other.  Basing  her  argument  on 
projections  of  expanding  requirements  for  software  and  increasingly  severe  shortages  ol  software  engineers  into  the  1 94(tV 
Anderson  ( 1 S)  considered  that  the  ADA  language  alone  cannot  solve  the  defence  software  problems,  and  advanced  the 
potential  of  rcuseahlc  software  components  as  a  further  aid.  High  software  productivity  in  Jap;'  >  was  already  said  to  be 
making  considerable  use  of  it,  based  on  cataloguing  and  retrieval  facilities  which  may  be  automated  or  even  I  Xpert  System- 
in  themselves;  the  potential  for  development  along  these  lines  is  evident.  Discussion  ranged  over  the  DOD's  plans  in  the  are  i. 
(he  need  for  standardisation,  the  differing  approaches  in  the  US  services  to  standard  ADA  environments  and  compilers,  and 
the  problems  which  arise  from  the  production  of  requirements  and  specifications  by  people  who  do  not  understand  soltw  ,u , 
technology,  giving  rise  to  unreasonable  demands  for  software  and  increasing  the  shortage  of  software  engineers. 

In  one  ol  the  tew  papers  not  directly  aimed  at  cost  reduction.  Reilly  ( 1 '! )  described  a  distributed  data  base  managemem 
system,  aimed  at  reliable  and  survivablc  operation  in  naval  vessels.  Though  costly,  howc'ci.  it  mas  well  he  the  cheapest  w  u 
of  achieving  the  high  survivability  aimed  at. 

This  session  was  more  a  collection  of  interesting  and  diverse  papers  than  a  cohcicni  appio.u  li  I"  the  session  tlicnu 

Session  IV  —  Reduction  of  Development  and  Support  C  osts. 
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Ihe  guided  weapon  industry  than  any  other  for  many  years.  Gauggcl  (20)  reviewed  the  arguments  and  experience  and 
described  some  recent  advances  relating  to  infrared  AAM  development.  In  the  aircraft  Held  simulation  is  just  as  valuable  and 
Hclie  (21 )  described  its  use  for  optimising  the  pilot-cockpit  interface  in  Ihe  context  of  the  rapid  advance  of  electronic  display 
and  controls. 

Standardisation  is  a  powerful  tool  in  cost  reduction  efforts  and  it  must  have  come  as  a  surprise  It)  many  not  working  in 
the  field  when  Henne  (22)  revealed  the  total  lack  of  standardisation  (hence  total  confusion)  of  the  interfaces  between  aircraft 
and  their  many  types  of  weapon;  he  described  the  USAF  efforts  to  introduce  a  standard  (Mil. -STD- 1  760)  to  rationalise  this 
situation. 


Session  V  —  Examples  of  Cost-Effective  Accomplishments  and  Approaches 

Terrain  following  is  a  very  necessary  but,  in  its  normal  form,  very  costly  technique  for  attack  aircraft  penetration.  An 
inexpensive  method  of  achieving  it,  using  a  pre-stored  flight  altitude  profile,  was  described  by  Schwegler  (2.7).  The  system 
had  been  flight  tested  at  operational  speeds,  but  the  crucial  details  of  the  ground  clearance  achieved  were  not  revealed. 

In  the  next  paper  (24)  Brunner  described  the  use  of  wing-mounted  pressure  taps  as  a  means  of  sensing  lift  coefficient 
for  the  control  of  STOL  aircraft  at  low  speed,  where  control  by  speed  is  undesirable.  Promising  results  had  been  obtained 
and  further  work  is  proposed,  including,  as  suggested  in  discussion,  measurement  of  sideslip  by  a  fin-mounted  sensor. 

As  demonstrated  in  several  papers  in  this  symposium,  a  good  approach  to  affordable  systems  is  to  integrate  sub¬ 
systems  designed  to  make  full  use  of  information  available  elsewhere  in  the  system.  Paper  25.  presented  by  Towler, 
described  a  simplified  inertial  navigation  unit  designed  to  take  advantage  of  information  available  front  a  wide  variety  of 
other  sensors,  particularly  Doppler  or  GPS-Navstar.  Interest  in  the  discussion  centred  on  the  well  known  Ferranti  technique 
of  carrying  a  temperature  model  of  the  system  to  avoid  the  need  for  thermal  stabilisation  and  facilitate  rapid  alignment. 

The  final  paper  (Gloerud.  26)  described  the  integration  of  the  Penguin  Mk  3  missile  guidance  and  control  system  using 
6  standard  microprocessors  connected  by  a  high  capacity  data  bus.  It  clearly  demonstrated  the  advantages  of  this  approach 
in  reducing  development  lime  and  cost.  The  question  and  answer  session  ranged  over  Ihe  performance  of  the  alignment 
system,  software  design  and  computer  characteristics. 


ROUND  TABLE  DISCUSSIONS 

Finally  an  active  general  discussion  was  aimed  at  crystallising  the  lessons  of  the  conference.  The  very  w  ide  range  ol 
costs  of  gyros  was  noted,  and  it  was  pointed  out  that  this  is  not  just  a  matter  of  design,  but  for  a  given  type  depends  strongly 
on  the  specification  to  be  met.  However  system  cost  depends  very  much  on  how  the  inertial  instruments  are  configured,  and 
there  is  much  scope  for  ingenuity  here.  The  trend  seems  to  be  towards  fully  integrated  systems  where  the  same  sensors, 
together  with  standard  data  buses  and  distributed  computers,  supply  the  needs  of  the  entire  guidance  and  control  sy  stem. 
Doubts  were  still  expressed,  however,  concerning  the  basic  conflict  ol  requirements  between  the  (light  critical  system's  need 
for  reliability,  simplicity  and  transparency,  and  those  of.  for  example,  navigation  for  high  accuracy;  this  may  be  reflected  in 
high  costs  in  verification  and  testing.  Clearly  no  one  approach  is  likely  to  meet  all  needs. 

More  and  more  of  the  rising  costs  of  defence  equipment  is  being  devoted  to  software,  ami  in  general,  where  both 
hardware  and  software  solutions  are  available,  software  is  usually  much  cheaper.  Nevertheless  the  need  to  devote  attention 
to  reducing  software  costs  is  very  clear.  Standardisation  of  high  level  language  and  data  buses  are  beginning  to  make  an 
impact,  and  rcuseable  software  should  help  in  the  future.  Software  engineers  however  are  seldom  closely  aware  of  the  real 
system  needs,  and  system  engineers  have  a  heavy  responsibility  for  cost  reduction.  ( ienerally  speaking,  the  structure  ol  the 
procurement  process  imposes  too  many  agencies  between  the  customer  and  designer.  Hie  initial  statement  of  a  requirement, 
by  the  nature  of  things,  always  involves  uncertainties  as  to  what  is  really  needed,  and  what  the  cost  implications  are.  I  here  is 
therefore  a  need  for  easy,  rapid  interaction  between  customer  and  designer  to  achieve  the  best  compromise  between 
performance  and  cost.  Every  error,  misconception  and  omission  removed  from  a  specification  or  statement  of  requirement 
represents  a  cost  saving.  There  is  however  a  potential  difficulty  il  customers  and  designers  are  to  be  closely  coupled  to 
achieve  minimum  cost,  namely  how  to  reconcile  competitive  bidding  with  such  a  process'.’ 

Finally  Ihe  Symposium  Chairman  summarised  the  conclusions  of  the  meeting  thus; 

Operational  requirements  must  be  very  carefully  produced; 

Frequent  modifications  must  be  resisted  unless  very  strongly  justified; 

Co-operation  between  specifiers  and  designers  is  essential  at  all  levels,  and  especially  rally  in  the  process; 

More  effective  collafioiation  is  inevitable,  starling  with  the  sharing  ol  development  costs. 

Consideration  of  saleability  is  always  important; 

No  matter  how  smart  our  systems  become,  numbers  remain  important,  then  hue  llmikim:  in  protects  must  replace 

thinking  in  financial  years; 

and  high  quality  engineering  is  more  Ilian  ever  vital. 
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4.  AUDIENCE  REACTION 


Interest  in  the  symposium  was  demonstrated  by  a  consistently  high  attendance  which  was  maintained  to  the  end.  As 
usual,  questionnaires  requesting  views  on  the  meeting  were  issued  to  participants,  but  only  about  1  in  6  responded,  leas  inc 
doubts  as  to  how  far  the  replies  received  can  be  taken  as  truly  representative.  Responses  to  the  initial  question  mas  be 


summarised  as  follows: 

Good 

Average 

Poor 

a  1 .  Quality  and  relevance  of  papers,  sessions  and  questions 

q 

s 

0 

a2.  Did  the  papers  support  the  theme? 

5 

1 1 

0 

More 

Less 

than 

Yes 

than 

a3.  Did  the  symposium  live  up  to  your  expectations? 

-i 

0 

5 

In  answer  to  the  more  general  questions,  there  was  satisfaction  with  the  technical  content,  but  some  disappointment  that 
the  user  voice  was  not  represented,  either  in  the  papers  or  the  audience.  The  critical  needs  lor  R  &  D  were  felt  to  be  in 
improving  software  engineering,  making  progress  with  VLSI/CHSIC,  and  increasing  reliability  and  maintainability.  Major 
challenges  and  unresolved  problems  for  the  future  were  stated  as  all  round  cost  reduction,  better  standardisation  and  better 
statements  of  user  needs  and  requirements.  Asked  what  further  action  NATO  and  AGARD  should  take  in  this  area,  several 
suggested  the  promotion  of  standardisation,  while  two  suggested  returning  to  the  topic  in  5  years  lime. 

5.  TECHNICAL  APPRECIATION 

The  keynote  speaker  emphasised  the  importance  of  using  every  possible  approach  to  Ihe  reduction  of  costs,  and  this 
was  reflected  in  the  wide  variety  of  topics  addressed  in  the  programme.  Nevertheless  there  were  some  important  omission-. 
Absence  of  a  user  contribution  has  already  been  referred  to,  and  there  was  also  a  lack  of  papers  dealing  comprehensively 
with  cost  reduction  in  the  design  and  development  of  major  systems,  a  point  noted  by  several  of  those  responding  to  the 
questionnaire.  Perhaps  the  paper  by  Gloerud  came  nearest  to  this,  and  certainly  if  it  is  taken  together  with  previous 
presentations  on  Penguin  (eg  Brodersen,  Proc  36th  GCP  Symposium.  May  I ‘183)  a  comprehensive  picture  does  emerge  \ 
number  of  papers  addressed  general  approaches  to  the  subject,  of  which  those  on  design-to-cost  (Shapiro),  reliability 
improvement  (Capitano)  and  software  engineering  (Anderson)  were  notable  The  wide  range  of  papers  on  low  cost  design  in 
guidance  and  control,  mostly  at  the  sub-system  or  component  level,  were  generally  of  a  high  standard  of  technical  interest. 

An  excellent  effort  to  fill  the  gap  in  between  was  made  by  Ostgaard.  in  what  may  very  legretably  have  been  his  farewell 
appearance,  and  it  is  unfortunate  that  his  paper  cannot  be  included  in  these  proceedings.  Another  paper  at  this  level,  that  h\ 
Murgue  and  livrard.  provided  an  object  lesson  of  interaction  between  user  and  designer  to  meet  user  needs  at  minimum  co-t. 
underlining  the  necessity  of  that  interaction  as  a  vital  contribution  to  the  control  and  reduction  of  defence  equipment  costs 

6.  MILITARY  POTENTIAL 

There  c  an  hardly  be  a  topic  which  should  be  of  greater  interest  to  the  military  set  v  ices  than  the  subject  of  this 
symposium,  and  it  is  astonishing  that  there  was  so  little  military  participation.  Since  some  ol  the  most  valuable  comments 
relative  to  the  port  the  user  must  play  if  lower  costs  are  to  be  obtained  came  in  the  discussions,  and  cannot  be  fully  reports d 
here,  an  important  opportunity  has  been  lost.  I  lowever  if  the  point  can  be  registered  that  there  is  a  strong  feeling  in  the 
technical  community  that  a  more  flexible  approach  to  operational  requirements  and  specifications  through  interaction 
between  user  and  designer  can  make  a  major  contribution  to  reducing  costs,  there  will  be  a  basis  for  real  progress.  In 
addition,  these  proceedings  can  he  recommended  to  Ihe  military  stall's  for  their  delineation  ol  a  wide  variety  of  approaches  'o 
the  achievement  of  effective  and  affordable  systems. 

7.  PRESEN  I  A I  ION  AN1)  ADMINISTRATION 

Not  many  conferences  can  have  given  rise  to  so  few  complaints.  The  far  ilitics  and  assistance  provided  by  the  host 
country.  "Turkey,  were  excellent,  as  was  the  AGARD  organisation.  T  he  Programme  (  ommittee  had  a  difficult  task  in  pu'tipp 
together  a  cohciviit  programme,  given  the  nature  of  the  topic  and  the  diversity  of  the  p.ipcis.  but  on  the  whole  they 
succeeded.  It  was  evident  that  attention  had  been  paid  to  persuading  contributors  to  speak  clear  Iv  and  not  too  last,  and  tin  u 
were  very  few  who  caused  the  interpreter  any  difficulty.  Visual  aids  were  generally  good,  and  a  number  ol  the  1  tench 
speakers  hail  thoughtfully  provided  slides  with  English  or  bilingual  captions,  a  courtesy  which  those  speaking  in  I  npltsli 
should  consider  id  inning  in  the  i ‘the  conlercncc  had  the  great  advantage  ol  having  all  p.utieipants  in  a  single  hot, I.  s,  - 
facilitating  technical  and  social  interaction  lliioiighout. 

K  RECOMMENDATIONS 

I  lie  Guidance  and  (  out t ol  Panel  is  to  I v  congratulated  on  linv  Ing  sun  i  sstollv  tackled  a  -iihird  uTm  li  ni.tirv  I-  la  s -  >  ■ 
notwithstanding  its  nupoi  lam  e .  might  be  too  hillu  ult  to  loi  in  I  hi  bans  lot  a  sill ,  ,  lul  si  inpo-nnn  l  ndoiihii  dtv  is  h  u  -  1 
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progress  is  made  in  the  future,  the  problem  of  the  high  cost  of  military  systems  will  not  go  away,  ami  it  is  therefore 
recommended  that  a  further  symposium  on  the  subject  should  be  considered  in  about  5  years. 

it  may  also  be  noted  that  a  number  of  participants  in  the  conference  recommended  increased  NATO  effort  towards 
standardisation,  though  this  is  not  a  field  in  which  AGARO  could  be  expected  to  play  a  major  role. 

Finally  it  is  recommended  that  steps  be  taken  to  acquaint  NATO  military  staffs  with  the  conclusions  of  the  symposium 
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REVIEW  OF  MISSION  VERSUS  COST  REQUIREMENTS 
AND  TECHNICAL  ISSUES 


C.Baron 

Head.  CM(s)  i/SAS 
Room  22 1  Ministry  of  Defence 
Savoy  Hill  House.  Savoy  Hill 
London,  UK 

Very  probably  everyone  in  this  audience  would  agree  that  we  have  a  problem  In  the  rising 
cost  of  aircraft,  and,  of  more  direct  concern  to  us,  of  guidance  and  control  systems;  in 
the  first  part  of  this  talk  I  will  be  discussing  this  problem  in  general  terms,  drawing 
heavily  upon  a  paper  by  Kirkpatrick  and  Pugh  (Ref  1).  I  hope  I  shall  succeed  in 
convincing  at  least  some  of  you  that  the  problem  is  more  serious  even  than  you  think. 

I  shall  then  briefly  refer  to  a  couple  of  examples  of  weapon  system  developments  in 
which  I  have  been  personally  involved,  and  try  to  draw  lessons  from  those  particular 
instances  which  bear  on  the  subject.  Then  finally  1  shall  come  back  to  general 
principles  and  point  to  a  route  which,  at  least  in  some  Instances,  may  get  us  out  of 
our  basic  dilemma,  that  of  seeking  more  fighting  capability  but  not  being  able  to  pay 
more  for  it. 

The  rise  in  combat  aircraft  costs  is  not  just  a  recent  phenomenon,  as  many  people 
think;  Fig  1  shows  that  it  has  been  going  on  almost  since  the  start  of  military 
aviation;  this  refers  mainly  to  British  aircraft,  but  the  inclusionof  a  number  of 
US  types  shows  that  the  trend  is  basically  the  same  on  both  sides  of  the  Atlantic. 

The  diagram  plots  unit  production  costs,  compensated  for  inflation,  as  a  function  of 
time.  Cost  escalation  is  not  just  a  thing  that  applies  to  aircraft,  or  a  few  similar 
types  of  system.  As  this  table  from  Sy  Deitchman's  excellent  book  (Ref  2)  shows,  it 
happens  over  a  wide  range  of  weapons  and  systems,  and  it  seems  reasonable  to  assume  that 
very  little  operational  military  equipment  is  not  involved  in  inexorably  rising  costs. 

ANNUAL  REAL  GROWTH  OF  UNIT  COST,  PER  CENT 
Infantry  AT  13 
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There  is  of  course  a  natural  human  tendency  to  assume  that  it  is  the  other  fellow  who 
has  the  problem,  not  ourselves,  and  I  have  spoken  in  the  past  as  much  as  most  people  I 
suppose  about  the  rapidly  reducing  cost  of  solid  state  electronics  and  computing, 
always  foreseeing  a  more  advanced  and  even  cheaper  stage  ahead.  Fig  2  shows  what  has 
really  been  happening;  we  see  that  for  both  all  weather  and  VFR  aircraft  avionics  the 
annual  cost  rise  is  about  the  same  as  that  for  aircraft  as  a  whole.  Why  is  it  that  we 
have  not  done  better  than  this,  in  view  of  the  advantages  we  have  had?  The  answer,  I 
think  is  that  we  have  been  encouraged  to  use,  for  example,  the  spectacular  reductions 
in  computer  hardware  costs  to  seek  improvements  in  performance,  not  cost  reductions; 
and  in  doing  so  we  have  developed  needs  for  better  or  additional  sensors  to  feed  them, 
for  better  or  additional  actuators  etc  to  use  their  increased  outputs,  and  of  course 
for  mountains  of  software. 

Kirkpatrick  &  Pugh  have  pointed  out  that  this  phenomenon  of  rising  defence  equipment 
cost  arises  from  the  operation  of  positive  feedback  in  the  procurement  process.  Fig  3 
depicts  the  first  and  most  obvious  example  -  when  two  nations  or  power  blocs  see  each 
other  as  potential  enemies,  each  new  aircraft  on  one  side,  Red,  say,  is  seen  as  a  threat 
by  the  other,  forcing  a  technology  advance  to  meet  this  threat  which  is  seen  as  being  so 
vital  that  the  cost  of  achieving  it  becomes  a  secondary,  though  still  important  factor. 
The  resulting  new  Blue  aircraft  stimulate  the  same  process  on  the  Red  side  and  so  a 
positive  feedback  loop  is  established.  It  is  important,  I  think,  to  point  out  that 
although  in  this  process  one  side  or  the  other  will  get  ahead  for  short  periods,  the 
average  over  time  is  inevitably  a  drawn  game,  and  the  only  steady  trend  with  time  is  a 
continual  Increase  in  cost  to  both  sides. 

Fig  A  shows  four  more  vicious  circles  -  on  the  production  side,  higher  costs  lead  to 
smaller  numbers  being  produced,  hence  lower  investment,  loss  learning  and  so  ever 
higher  production  costs.  Similarly  in  the  development  process,  higher  costs  mean  less 
frequent  projects,  so  bigger  Jumps  in  technology  are  needed.  I.ess  frequent  project;; 
lead  to  decay  of  development  teams  between  projects  with  the  result  that  they  are  less 
able  to  cope  with  the  advances  in  technology  required,  and  development  costs  and  times 
rise  ever  more  steeply.  And  all  t.hl3  makes  dec  1  s  1  on- 1  nk  i  ng  more  difficult,  each 
decision  gives  rise  to  more  arid  more  studies.  Investigations  arid  argument,  and  the 
process  becomes!  ever  more  protracted  and  ever  more  costly. 

t 

The  problem  of  cost  r  sen  I  n  t  t  on  Is  so  fundament  s  I  olid  :,«•  -.evere  t  lint  every  possible 
approach  which  may  oppose  it  most,  lie  employed.  i'oe  Important  eont  i  t  hut  or  must  tie  t  tie 
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exercise  of  great  care  In  laying  down  performance  requirements.  As  Fig  5  shows,  when  a 
new  type  of  system  becomes  available,  rapid  Improvements  In  performance  are  achieved  at 
first  as  more  and  more  Ideas  and  research  are  applied  to  it.  After  some  decades, 
however,  more  fundamental  limits  to  performance  are  reached,  as  for  example,  the 
limitations  of  materials  and  structural  technologies  are  tending  to  set  limits  to  the 
speed  of  aircraft  at  low  altitude.  If  now  a  performance  is  called  for  which  is  too 
close  to  the  limits  of  technology,  large  cost  increases  will  arise,  or  the  project  may 
even  have  to  be  cancelled.  The  problem  of  the  Service  in  choosing  the  right  level  of 
performance  to  specify  is  exacerbated  by  their  having  been  accustomed,  for  decades 
perhaps,  to  obtaining  major  performance  rises  with  each  new  generation  -  moreover,  in 
complex  systems  it  is  not  always  clear  just  where  the  limits  will  be. 

To  give  you  an  example  from  my  own  experience,  back  in  the  1960s,  when  high  speed  low 
level  aircraft  began  to  be  perceived  as  a  threat,  both  the  US  and  British  armies 
produced  requirements  for  low  level  SAM  systems,  and  developments  were  begun  on  both 
sides  of  the  Atlantic.  The  requirements  were  much  too  ambitious,  however,  and  the 
British  system,  called,  PT428,  was  cancelled  after  two  years,  and  the  US  Mauler  after 
four,  in  both  cases  because  of  rapidly  rising  costs  and  serious  development  problems. 

Now  I  have  to  admit  that  I,  along  with  other  engineers  and  scientists,  had  gone  along 
with  the  Armies'  requirements  without  protest,  but  at  least  with  the  cancellation  of 
PT428  I  did,  with  a  colleague,  Mr  J  E  Twinn,  begin  to  think  out  what  the  real  need  of 
the  Army  was,  and  we  were  able  to  evolve  a  proposal  for  a  system  which  could  provide  an 
effective  low  level  defence  with  a  unit  cost  almost  a  tenth  of  what  PT428  and  Mauler 
had  been  expected  to  cost,  and  with  lower  operating  manpower.  We  had  great  difficulty 
in  persuading  the  Army  to  accept  our  proposal,  since  it  meant  radically  changing  their 
existing  policies  and  performance  requirements.  Fortunately  we  succeeded  in  the  end, 
and  our  proposal  became  the  Rapier  system  (Fig  6),  which  has  been  sold  to  the  tune  of 
over  3  billion  pounds  in  many  countries,  and  for  the  invention  of  which,  as  the 
Chairman  kindly  mentioned  in  his  introduction,  Mr  Twinn  and  I  recently  received  a  major 
MOD  award. 

Now  the  lessons  I  would  like  to  draw  from  this  experience  are,  first,  that  technologists 
must  play  an  active  part  in  helping  the  Services  to  pitch  their  requirements  so  as  to 
yield  equipments  with  the  best  compromise  between  performance  and  cost,  and  secondly, 
that  equipments  designed  for  the  lowest  cost  in  conjunction  with  acceptable  performance 
can  still  be  technically  interesting.  Rapier  was  a  more  original  and  innovative 
design  than  either  PT428  or  Mauler,  because  we  had  a  stronger  incentive  to  introduce 
new  ideas  to  keep  the  cost  and  manning  down. 

For  example  we  designed  an  unmanned  pulse  doppler  radar  which,  at  relatively  low  cost, 
automatically  performed  the  functions  of  target  detection  and  location,  threat 
assessment  and  identification,  none  of  which  had  ever  been  attempted  before. 

For  any  equipment  at  a  given  stage  of  technology,  the  relationship  between  cost  and 
effectiveness  is  of  the  form  shown  in  the  upper  curve  of  Fig  7.  At  the  lowest  cost  we 
have  very  simple  equipments  which  are  virtually  ineffective,  but  then  we  reach  a 
threshold  where  effectiveness  increases  more  rapidly  than  cost  up  to  the  point  of 
optimum  unit  cost  effectiveness,  beyond  which  the  approach  to  the  limit  of  available 
technology  causes  rapid  cost  escalation.  If  we  now  consider  the  effectiveness  of  a 
force  of  equipments,  there  are  two  reasons  why,  for  a  constant  total  expenditure,  it 
is  better  to  go  for  a  cheaper  equipment  than  that  which  gives  optimum  unit  cost 
effectiveness.  This  is  because  of  the  advantage  of  having  greater  numbers,  both  in 
reducing  unit  production  costs  and  in  increasing  force  effectiveness. 

One  can  well  sympathise  with  the  problem  the  Services  face  in  pitching  their 
requirements  so  as  to  hit  this  maximum  -  if  they  call  for  too  much  performance,  even  at 
the  level  of  optimum  unit  cost  effectiveness,  they  will  get  only  a  small  number  of 
expensive  aircraft.  On  the  other  hand,  if  they  go  all  out  for  low  unit  cost  they  may 
get  a  lot  of  cheap  aircraft  but  their  force  is  equally  ineffective. 

I  remember  one  very  clear  Instance  of  this,  again  from  the  time  when  I  was  much  involved 
with  guided  weapons  system  design.  We  were  considering  the  design  of  a  new  naval  air 
defence  system,  and  the  Navy,  having  become  very  concerned  with  rising  costs,  had 
decided  to  deal  with  this  by  specifying  maximum  cost  figures  for  both  weapon  and  system. 
An  argument  developed  about  the  threat  the  system  should  be  designed  to  meet;  the 
scientists  said  that  since  it  was  by  then  well  within  the  state  of  the  art  to  design  a 
sea-skimming  anti-ship  missile,  it  was  essential  that  the  system  should  perform  against 
such  a  threat.  The  Navy,  believing  that  this  would  lead  to  a  design  above  their  cost 
limits,  and  being  able  to  say  that  there  was  no  sign  of  such  a  threat  materialising, 
refused  to  accept  this  and  the  system  design  went  ahead  without  that  capability.  The 
result  was  that  when  the  threat  did  appear  a  few  years  Inter  very  expensive 
modifications  had  to  be  made  to  the  system  and  the  final  cost  was  much  greater  than  it 
need  have  been. 

Apart  from  this  question  of  getting  the  requirements  right,  other  methods  of  reducing 
costs  Include  International  collaboration,  export  promotion,  improved  production 
technology,  nnd  value  engineering.  In  the  aircraft  field  caicritlally  all  the  benefit 
likely  to  bo  achlevuble  from  the  first  two  has  already  born  obtained,  and  while 
undoubtedly  the  application  of  computers  to  production  will  continue  to  give  benefits, 
the  small  production  runs  dictated  by  modern  aircraft  omit  a  prevent  the  application  at 
the  capital  Investment  needed  fully  to  apply  such  techniques. 
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Value  engineering  has  already  produced  some  substantial  savings  but  may  now  have  reached 
the  stage  where  further  improvements  will  be  smaller  and  more  difficult  to  obtain.  We 
have  to  remember  moreover  that  the  long  history  of  military  aircraft  has  always  seen  the 
constant  incorporation  of  improved  production  and  cost  reduction  techniques  and  yet  that 
8%  per  annum  cost  escalation  has  gone  on  without  check.  There  therefore  seems  no  clear 
reason  to  believe  that  it  will  not  continue.  At  best  perhaps  we  may  be  able  to  slow  it 
down;  certainly  we  must  put  every  possible  effort  into  doing  so.  Perhaps  the  greatest 
hope  is  the  seriousness  of  the  situation;  most  nations  have  now  been  forced  to  reduce 
the  sise  of  their  aircraft  fleets,  and  the  number  of  types  of  aircraft  they  employ,  to 
a  minimum  below  which  the  viability  of  the  air  force  comes  into  question,  and  even 
holding  the  force  at  this  level  has  required  transfers  from  other  areas  within  defence 
budgets.  Moreover  the  high  costs  of  tne  now  infrequent  aircraft  purchases  throw  serious 
strains  on  defence  budgets  when  they  do  occur;  at  its  peak  Tornado  absorbed  18*  of  the 
UK  defence  budget  (Ref  3)  and  similar  problems  have  been  observable  in  most  Western 
European  nations  in  recent  years. 

One  possible  way  out  of  this  situation  may  exist.  Consider  again  the  way  in  which 
system  performance  Increases  with  time  as  depicted  in  Fig  5.  When  a  new  type  of  system 
is  introduced,  be  it  aircraft,  tank,  torpedo  or  whatever,  improvements  at  first  come 
rapidly  and  cheaply;  after  a  few  successive  generations,  however,  a  law  of  diminishing 
returns  sets  in,  progress  is  only  obtained  slowly  and  at  great  expense;  at  this  stage  it 
also  becomes  increasingly  difficult  to  achieve  a  decisive  technological  advantage  over 
an  opponent,  because  both  sides  tend  to  be  pressing  closely  against  the  same  fundamental 
limits.  My  ex-chief,  lately  Chief  Scientific  Adviser  Sir  Ronald  Mason  has  graphically 
described  this  situation  as  that  of  'baroque  technology',  as  opposed  to  new  technology 
when  we  are  operating  in  the  lower  part  of  the  curve.  Suppose  we  could  replace  our 
baroque  technologies  by  new  technologies,  we  would  once  again  be  in  a  situation  to  move 
forward  rapidly  and  cheaply;  moreover  we  would  be  able  to  move  away  from  the  naturally 
drawn  game  of  the  baroque  technologies  to  one  in  which  we  would  have  a  lead,  enabling 
us  to  dictate  to  the  opposition  and  possibly  impose  upon  him  much  greater  costs  than  we 
need  expend  ourselves. 

This  has  of  course  happened  frequently  in  the  past  in  the  replacement  of  sail  by  steam, 
the  horse  by  the  tank,  and  so  on.  Consider  the  development  by  the  Royal  Air  Force  of 
high  speed  low  level  aircraft  attack  techniques;  it  cost  us  a  good  deal  in  the 
development  of  aircraft,  navigation,  cockpit  instrumentation  and  weapons,  but  when  cne 
considers  the  enormous  efforts  the  Soviet  Union  has  had  to  put  into  low  level  air 
defence,  only  recently  culminating  in  AEW  and  look  down  shoot  down  interception  systems, 
there  can  be  little  doubt  where  the  advantage  has  lain.  Now  would  be  about  the  right 
moment  to  change  again  to  a  new  technology,  and  it  may  be  that  we  have  it  in  the  shape 
of  the  cruise  missile  and  similar  systems,  which  have  the  characteristics  to  negate  the 
opposition's  previous  air  defence  efforts,  and  send  him  back  to  the  drawing  board  again. 

It  is  important  to  recognise  that  new  technology  can  only  yield  these  advantages 
provided  it  is  allowed  to  replace  baroque  technology.  One  has  seen,  fop  example 
satellite  communication  systems  being  introduced  to  supplement,  but  not  replace,  the 
previous  communications  systems;  new  navigation  systems  are  all  too  often  added  to  the 
aircraft  cockpit,  yet  another  complication  for  the  over-worked  pilot  to  master,  while 
none  of  the  old  types  are  removed,  in  the  belief,  probably  mistaken,  that  more  equipment 
will  yield  better  navigation. 

There  are  at  the  present  time  great  possibilities  open  to  us  in  the  applications  of  new 
sensors,  advanced  signal  processing  and  artificial  intelligence,  to  name  a  few  out¬ 
standing  examples.  If  we  merely  employ  these  to  add  to  the  equipment  of  baroque 
system  types  we  will  only  contribute  to  further  cost  rises.  If,  on  the  other  hand,  we 
are  able  to  apply  them  to  introduce  new  types  of  systems  which  make  possible  new 
approaches  to  military  problems  we  can  not  only  reduce  our  own  defence  costs,  but  at 
the  same  time,  by  taking  the  initiative  from  the  opposition  we  may  also  increase  the 
strain  on  his  resources.  The  scientific  and  technical  community  must  work  to  counter 
the  forces  of  conservatism  and  vested  interest  which  always  teno  to  oppose  new  ideas. 

One  last  point:  the  Western  nations  have  all  tended,  to  a  greater  or  lesser  degree,  to 
seek  to  employ  sophisticated  equipment  to  allow  them  to  reduce  the  number  of  people  in 
the  Armed  Service,  conscription  being  unpopular  in  democracies.  The  UK  in  fact,  has 
done  this  more  than  most.  The  Eastern  Bloc,  on  the  other  hand,  has  little  difficulty  in 
keeping  in  being  very  large  forces.  If  the  cost  of  manpower  increases  in  line  with 
inflation,  while  equipment  costs  rise  8-10%  faster,  this  Western  policy  must  become 
untenable  in  the  end. 

It  is  therefore  absolutely  vital  that  we  should  all  play  our  part  in  the  effort  to 
reduce  equipment  costs,  and  to  see  that  technology  is  applied  to  reducing  costs,  and  Is 
not  allowed  to  become  a  reason  for  increasing  them. 
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Figure  3  Positive  feedback  causing  increasing  aircraft  cost 
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SUMMARY 

The  design  of  flight  control  systems  for  fighter  aircraft  is  discussed  with  respect  to 
areas  which  contribute  to  minimizing  life-cycle  costs.  As  life-cycle  costs  include  all 
costs  accummulating  during  the  whole  life  of  the  system,  all  phases  from  the  design  to 
in-service  use  are  considered.  Any  structural  and  technological  design  features  that  are 
introduced  to  save  costs  during  system  operation  and  maintenance  require  additional  deve 
lopment  effort.  Therefore,  the  expected  cost  benefit  has  to  be  balanced  against  the  deve 
lopment  effort  invested  into  the  system  to  achieve  a  cost-effective  design. 

The  paper  is  comprised  of  two  chapters,  with  chapter  1  covering  the  sensor  information 
processing  and  chapter  2  covering  the  actuation  system. 


1 .  SENSOR  INFORMATION  PROCESSING 


1 . 1  INTRODUCTION 


Flight  control  systems  are  designed  to  fulfill  given  performance  and  safety  require¬ 
ments  and  to  comply  with  aircraft  specific  boundary  conditions.  Apart  from  that,  it  is 
the  task  of  the  design  engineer  to  select  from  the  various  possible  system  configuration 
and  available  technologies  the  most  cost-effective  solution. 


Cost-effectiveness  means:  Minimal  life-cycle  costs  at  a  given  level  of  performance 
where  life-cycle  costs  include  all  costs  accumulating  during: 

“  the  design  and  development  phase, 

*  the  production  phase, 

°  the  in-service  phase,  and 
°  the  post  design  and  system  upgrade  phase. 

I'  should  be  noted  that  the  performance  and  safety  requirements  have  a  strong  cost 
impact  and  should  therefore  be  kept  at  a  reasonable  level.  In  the  following,  however, 
performance  and  safety  requirements  are  considered  as  fixed  values  which' are  not  further 
discussed. 


The  design  features  of  the  system  affect  the  costs  in  all  phases  in  different  ways. 
Thus,  it  is  necessary  that  the  costs  produced  in  the  various  phases  are  not  considered  i 
isolation  but  as  a  whole  in  order  to  achieve  an  optimal  design  with  respect  to  minimal 
life-cycle  costs. 

1.2  COST  FACTORS 


The  parameters  which  influence  the  production  costs  per  system  and  the  associated 
aircraft  costs  are  system  size,  weight,  power  consumption  and  environmental  condition 
requirements . 

The  costs,  accumulating  during  the  in-service  phase,  are  determined  by  system  relia¬ 
bility,  maintainability  and  testability. 

The  flexibility  needed  for  modifications  are  given  by  system  modularity,  standardi¬ 
zation  and  growth  potential. 

The  development  costs  are  a  function  of  the  complexity  of  the  selected  solution, 
which  depends  on  the  above  mentioned  features  that  are  designed  into  the  system.  Apart 
from  that,  there  are  computerized  methods  and  tools  that  support  the  design  and  thereby 
help  to  reduce  development  costs. 

1.3  DESIGN  FEATURES 


Integration  of  flight  control  with  fire  control  and  propulsion  control  is  supported 
by  the  use  of  multiplex  data  busses  for  communication  between  the  flight  control  system 
and  the  avionics  and  utility  systems.  Also,  data  transmission  within  the  flight  control 
system  via  a  multiplex  data  bus  offers  a  number  of  advantages: 

*  Mil  std  ISIS  B,  for  example,  is  a  worldwide  Introduced  standard.  Standard  test  equip¬ 
ment  is  available  so  that  no  special  Interface  and  no  special  test  equipment  must  be 
developed . 

*  A  data  Inin,  e.  g.f  to  connect  the  flight  control  computet  will,  an  eel  nuclei  rent  to] 
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unit,  has  considerably  less  weight  than  conventional  analog  data  links  and  thereby 
helps  to  reduce  total  system  mass. 

*  Mil  Std  1553  B  is  a  command-response-system  with  high  reliability  and  testability. 

*  Standardized  interface  makes  it  easy  to  exchange  existing  equipment  against  a  new  type 
of  equipment  in  the  course  of  system  upgrade  and  modernization. 

In  Fig.  1.1  the  structures  of  a  conventional  and  a  data  bus  oriented  flight  control 
system  are  compared  against  each  other. 

Further  to  system  structure.  Fig.  1.2  a  shows  a  flight  control  system  which  consists 
of  three  separate  subsystems  (autopilot,  command  and  stability  augmentation  system,  spin 
prevention  and  incidence  limiting  system) .  By  integrating  the  functions  of  the  three  sub¬ 
systems  into  one  set  of  computers  (Fig.  1.2  b)  it  would  be  possible  to  significantly  re¬ 
duce  size,  weight  and  power  consumption.  Estimated  values,  taking  the  present  system  as 
a  reference,  are  given  in  the  table  below: 

System  Structure _ Size _ Weight  Power 

Conventional  System  1  1  1 

Integrated  System  0,56  0,60  0,81 

Beside  that,  5  different  Line  Replaceable  Units  (LRU's)  would  be  replaced  by  3  LRU’s 
of  the  same  type.  This  would  require  less  spare  parts. 

Not  always  is  system  integration  so  straight  forward  with  regard  to  weight  reduction, 
as  is  shown  with  the  following  example. 

A  study  has  been  carried  out  to  compare  three  different  configurations  of  actuator 
control  as  part  of  the  flight  control  system  (Fig.  1.3): 

(a)  Actuator  control  units  installed  in  the  rear  of  the  aircraft  fuselage  with  data  trans¬ 
mission  between  flight  control  computers  and  actuator  control  units  via  a  Mil  Std 
1553  B  data  bus. 

(b)  Actuator  control  integrated  into  flight  control  computers. 

(c)  Actuator  control  units  and  flight  control  computers  both  located  in  the  avionics  bay. 

Estimated  values  of  size,  weight,  and  power  consumption,  taking  solution  (a)  as  a 
reference,  are  shown  in  the  table  below: 


Solution 

Size 

Weight 

Power 

a 

1 

1 

1 

b 

0,75 

1,09 

0,81 

c 

0,88 

1,12 

1,02 

Solution  (a)  turns  out  to  have  the  lowest  weight.  In  this  case,  using  a  data  bus 
saves  more  weight  than  would  be  achieved  by  higher  system  integration.  However,  the 
reliability  of  the  actuator  control  units  is  reduced,  because  they  are  installed  in  an 
unconditioned  area  of  the  aircraft.  If  for  the  actuator  control  units  special  cooling  is 
provided  or  high  temperature  resistant  electronics  is  used,  the  development  and  produc¬ 
tion  costs  go  up.  With  respect  to  size  and  power  consumption,  the  Integrated  solution 
(b)  is  the  best. 

Generally  speaking,  system  integration  offers: 

0  Reduction  of  size,  weight  and  power  consumption. 

°  Better  testability. 

On  the  other  hand,  a  modular  structure  offers: 

•  Less  expensive  spare  parts 

°  Changing  LRU's  Is  easier  due  to  smaller  weight. 

•  Higher  flexibility  for  modifications. 

Inertial  sensors  are  required  for  flight  control,  navigation,  and  weapon  delivery. 
However,  flight  control  requires  body  angular  rates  and  translational  accelerations 
from  redundant  sensors,  whilst  navigation  requires  position  anil  velocity  data  with  high 
accuracy.  Therefore,  present  aircraft  have  rate  gyros  and  accelerometers  for  flight  con¬ 
trol  and  inertial  navigation  systems  for  navigation  and  weapon  delivery  (Fig.  1.1  a). 

Strap-down  inertial  sensors  with  digital  data  processing  provide  both,  body  rates  and 
accelerations  for  flight  control  and  sufficient  accuracy  for  navigation.  So,  these  multi¬ 
function  sensors  can  be  used  to  supply  the  flight  control  system  and  the  avionics:  syr.ten 
with  the  necessary  sensor  signals,  thereby  reducing  weight  and  volume  (Fig.  1.1  b) . 
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Air  data  are  required  for  flight  control,  air  intake  control,  propulsion  control, 
and  cockpit  instrumentation  (rig.  1.1  a).  An  integrated  air  data  system,  which  supplies 
all  aircraft  systems  with  the  necessary  data,  again  helps  to  reduce  weight  and  size 
(Fig.  1.1  b). 

The  introduction  of  advanced  electronics  technology  offers  a  number  of  advantages. 

A  reduction  of  power  consumption  is  achieved  with: 

*  VLSI  standard  processors  and  peripheral  components, 

*  Programmable  Array  Logic  and  C-MOS  Gate  Arrays, 

*  Fiber  optical  links. 

In  particular,  C-MOS  Gate  Arrays  offer: 

°  Less  components  and  soldering  points  because  of  high  complexity  circuits. 

*  Less  power,  less  cooling  air  and  improved  reliability  because  of  low  power  dissipation, 

*  Higher  clock  frequency, 

*  Reduced  development  costs  by  application  of  Computer  Aided  Design  (CAD) , 

*  Reduced  modification  costs. 

The  leadless  chip  carrier  technique  on  ceramic  multilayer  cards  offers: 

.*  Improved  reliability  due  to  small  temperature  differences  because  of  excellent  heat 
conduction, 

*  Higher  clock  frequency, 

0  Less  space  required  compared  to  conventional  Dual  In-Line  Package  (DIP)  components. 

Standardization  of  interfaces  (e.  g.  Mil  Std  1553  B) ,  modules  (e.  g.  power  supply 
units) ,  and  components  (e.  g.  receivers)  helps  to  simplify  system  modif ication. 

The  computing  power  (throughput,  memory)  and  the  interfaces  should  have  a  certain 
percentage  of  growth  potential  to  allow  for  small  modifications  without  a  complete  hard¬ 
ware  redesign. 

Self-test,  i.  e.  continuous  and  interruptive  built-in  test,  has  the  task  to  detect 
and  isolate  failures  prior  to  and  during  flight  to  ensure  flight  safety  and  to  identify 
and  locate  failures  to  support  maintenance. 

To  be  operationally  cost-effective,  the  pre-flight  test  shall  fulfill  the  following 
requirements: 

°  Short  duration  of  test, 

°  Minimum  pilot's  participation  during  test, 

°  Minimum  movement  of  control  surfaces  during  test, 

°  Avoid  nuisance  No-Go  Indications. 

Failures  identified  by  the  continuous  monitoring  shall  be  either  indicated  on  a  main¬ 
tenance  panel  or  recorded  on  a  maintenance  recorder.  Only  relevant  failures  shall  be 
stored  to  avoid  unnecessary  maintenance  activity. 

The  first  line  test  on  the  aircraft  shall  be  capable  of  identifying  and  locating 
failures  down  to  card/module  level  rather  than  LRU  level.  The  advantage  of  this  is  that, 
after  the  defective  LRU  has  been  removed  from  the  aircraft,  there  is  no  additional  test 
necessary  to  identify  the  defective  module.  This  reduces  test  time  and  test  equipment. 

The  equipment  shall  be  Installed  in  the  aircraft  in  such  a  way  that  the  maintenance 
crew  has  easy  access  to  it  for  inspection  and  LRU  replacement  durinq  turn-around. 

Sufficient  burn-in  shall  be  applied  to  have  a  good  selection  of  components  and  achieve 
high  reliability.  Improved  reliability  means  reduced  defect  rate,  higher  equipment  availa¬ 
bility  and  cost  savings  because  of: 

*  Less  frequent  testing  for  identification  and  location  of  defects  and  proving  of  serv ic-.— 
ability  after  repair, 

*  Less  frequent  changing  and  repair  of  defective  equipment. 

*  Less  spares  required. 

1.4  DESIGN  AND  TEST  TOOLS 

The  increasing  requirements  on  flight  control  and  the  progressing  Integration  with 
other  aircraft  systems  make  flight  control  systems  for  modern  fighter  aircraft  more  and 
more  complex.  This  requires  that  computerized  methods  and  tools  are  used  to  support  th«- 
design,  tent,  documentation,  configuration  control,  and  project  mnnnooment  in  order  to 
minimize  design  errors  and  reduce  development  time  and  costs. 

Examples  of  design  methods  are: 

*  Structured  Analysis 

*  Modular  Design 

*  Pseudo-Code 
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Structured  Analysis  supports  the  design  by  means  of  a  complete  and  consistent  system 
model.  Modular  Design  cuts  the  system  down  to  small  and  transparent  units.  Pseudo-Code 
provides  an  easy-to-understand  description  of  the  system  functions. 

Software  integrity  is  a  pre-requisite  for  flight  release  of  a  digital  flight  control 
system.  One  possibility  for  verification  and  validation  of  flight  control  software  is  to 
use  another  computer  with  dissimilar  software  for  a  comparison  test.  This  method  has 
successfully  been  used  to  test  the  software  of  a  digital  autopilot.  For  this  purpose  a 
Cross-Software  Test-System  was  developed  with  a  test  computer,  that  contains  a  software 
model  of  the  autopilot  as  well  as  a  stimulation  and  evaluation  program.  The  test  is 
fully  automated. 


2.  HYDRAULIC  ACTUATION  SYSTEM 

2.1  LIFE  CYCLE  COSTS 

The  life  cycle  cost  shown  in  Fig.  2.1A  is  comprised  of: 

"  Development  Costs 
°  Manufacturing  Costs 
°  Maintenance  and  Operational  Costs 

The  development  cost  constitutes  approximately  10  %,  the  manufacturing  cost  20  %  and 
the  maintenance  and  operational  cost  70  %  of  the  total  life  cycle  cost.  This  makes  it 
understandable  that  an  attempt  should  be  made  to  invest  more  in  development  and  less  in 
maintenance  and  operational  costs  whenever  possible. 

To  this  end,  the  following  points  should  be  kept  well  in  mind: 

°  Sophisticated,  straight-forward  design  philosophy  involving  simple  solutions  (no  elabo¬ 
rate  hardware  I . 

°  Modular  design,  the  modularity  striving  toward  common  building  blocks  for  the  various 
actuation  systems. 

°  Easy  access  to  components  to  facilitate  maintenance. 

*  Common  actuation  systems  for  the  various  control  surfaces  whenever  possible. 

*  Automatic  failure  diagnosis  using  built-in  test  (BITE). 

*  Extension  of  life  time  by  replacing  modules  only  upon  a  condition  involving  defects 
(conditional  maintenance) . 

”  Easy  alignment  procedure  for  remounting  overhauled  equipment. 

A  further  aspect  increasing  the  life  cycle  cost  involve  indirect  costs  which  may  be 
reduced  by: 

*  Constructive  designs  that  minimize  wear,  or  fatigue  behaviour. 

*  Automatic  test  procedures  (BITE)  that  do  not  evoke  unnecessary  wear. 

*  Minimizing  the  scope  of  Inspection  procedures  for  periodic  maintenance. 

*  Low  commitment  of  manpower  in  the  maintenance  effort. 

To  give  an  overall  view,  Fig.  2. IB  shows  how  the  life-cycle  cost  of  maintenance  and 
operation  is  distributed  throughout  all  equipments  in  a  fighter  aircraft.  50  %  of  all 
costs  involve  the  flight  control  and  avionics  systems. 

2.2  FLIGHT  SAFETY  COSTS 

Flight  safety  can  only  be  achieved  by  high  levels  of  redundancy  which  includes  mul¬ 
tiple  channels,  identical  in  technological  desiqn  and  having  static  and  dynamic  charac¬ 
teristics  within  close  tolerances  to  achieve  low  monitoring  thresholds.  The  close  tolerai. 
ces  drive  the  costs  upward;  therefore,  specified  tolerances  must  not  he  specified  any 
closer  than  absolutely  necessary  to  ensure  flight  safety  with  respect  to  the  transient 
behaviour  of  the  aircraft  after  channel  failures. 

Simplified  dissimilar  backup  channels  should  be  envisaged  ami  allowance  made  for  de¬ 
graded  performance.  The  failure  philosophy  should  establ ish "oseent t a  1 "  nr  1  “non-essential 
control  surface  combinations.  The  essential  sut face  combination  provides  a  fly-homo  capn 
btlity  and  has  a  fa  i  i -operate/fa  1 1  -operate  failure  character  I  s  •  I  r .  The  non-essential  sur¬ 
faces  have  fail-safe  only. 

The  flight  control  system  must  be  capable  of  being  "reset"  by  tin-  pilot  aftet 
ostensible  failures  in  order  t  o  count  evaei  nuisance  monltoi  trip-.  whl--'i  u.-e,  r  can  be 
plelciy  ,  V<  •  I  *  l<  "t  In  a  Cost  effiM-t  I . . .  i  <  1 1 1 . 
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2.3  MISSION  RELIABILITY  COSTS 

Reducing  the  costs  of  flight  safety  i  nfluences  the  mission  reliability.  Mission  relia¬ 
bility  should  not  be  overemphasized  since  many  missions  can  be  completed  without  full 
aircraft  performance  capability.  The  cost  of  an  aborted  mission  should  be  carefully 
weighed  against  the  costs  of  increasing  the  redundancy  level  to  maintain  full  perfor¬ 
mance  of  the  flight  control  system  after  failures.  It  is  the  opinion  here  that  flight 
safety  combined  in  a  fly-home  capability  provides  acceptable  mission  reliability.  No 
extra  costs  should  be  accepted  in  this  area  with  respect  to  flight  control. 

2.4  COMBINATION-CONTROL-SURFACE  CONCEPT 

A  combination-control-surface  concept  divides  the  control  surfaces  into  essential 
and  non-essential  groups.  The  essential  group  of  surfaces  is  necessary  to  provide  a 
fly-home  capability  after  failure  in  one  of  the  non-essential  surfaces.  As  already 
mentioned  above,  the  essential  surfaces  have  f ail-operate/fail-operate  failure 
characteristics  while  the  non-essential  ones  have  fail-safe  only.  Fail-safe  is  accom¬ 
plished  by  switching  the  actuator  to  heavily  damped  ("slugged")  operation  whereby 
the  chambers  on  each  side  of  the  actuator  piston  are  connected  together  via  a  re¬ 
stricted  oil  passage.  A  combination-control-surface  concept  is  illustrated  in  Fig. 

2.4  A. 


The  simplexed  non-essential  control  surfaces  offer  large  savings  with  respect  to  cost 
and  weight  for  both  the  actuation  as  well  as  the  hydraulic-supply  system.  Only  the  mis¬ 
sion  reliability  may  decrease  as  a  result  of  these  savings.  However,  repeating  what  has 
been  said,  many  missions  do  not  require  high  performance  in  maneuvering  in  order  to  be 
completed. 

2.5  REDUNDANCY  CONCEPT 

Fig.  2.5A  shows  a  redundancy  concept  comprised  of  essential  and  non-essential  surfa¬ 
ces.  The  essential  surfaces  have  quadruplex  technology  for  the  actuation  systems  and 
associated  signal  processing.  The  non-essential  surfaces  have  duplex  technology  to  meet 
the  safety  requirements  mentioned  in  2.2.  As  an  option,  a  mechanical  backup  is  drawn  in 
dashed  lines  to  the  essential  surfaces  in  the  event  that  dissimilar  redundancy  is  con¬ 
sidered  prudent  for  possible  total  failure  of  the  quadruplexed  sensor  information  pro¬ 
cessing  system. 

The  rudder  control  is  not  considered  to  be  absolutely  essential  for  crosswind  lan¬ 
dings  up  to  moderate  wind  velocities  and  therefore  the  backup  option  is  omitted.  The 
touchdown  maneuver  may  be  somewhat  rough,  but  the  aircraft  can  be  succesfully  landed 
under  emergency  conditions. 

Fig.  2.5B  shows  a  cost-effective  redundancy  arrangement  for  a  hydraulic  supply  systei 
The  system  is  designed  to  give  fal 1-operate/fall-operatc  charactorist ics ' f or  feeding  the 
essential  control  surface  actuators.  Two  of  the  three  hydraulic  circuits  supplied  by  each 
of  the  two  pumps  are  used  to  supply  the  flight  control  surface  actuators.  The  non-essen¬ 
tial  control  surface  actuators  are  connected  such  as  to  balance  flow  rates  as  far  as 
possible . 

An  auxiliary  drive  is  shown  as  an  option.  With  regard  to  installing  auxiliary  power 
drives,  it  is  the  opinion  here  that  the  probability  of  a  double  flame-out  of  the  engines 
must  be  carefully  weighed  against  the  costs  and  loss  of  aircraft  performance  through 
weight  penalties. 

Fig.  2.5C  shows  an  installation  schematic  of  the  supply  system  depicted  in  Fig.  2.5T-. 
It  should  be  noted  that  the  long  hydraulic  lines  (most  exposed  to  failure)  supply  the 
non-essential  surfaces.  These  lines  need  only  to  be  simplexed. 

2.6  ACTUATOR  SYSTEM  DESIGN 

Fig.  2.6A  shows  how  criteria  from  nerodynamica 1  and  flight  mechanical  cons iderat toe r 
in  addition  to  the  required  reliabilily  and  safety  are  introduced  into  the  design  of 
actuation  system. 

Fig.  2.6B  shows  a  schematic  system  diagram  of  a  two-servo  valve  actuation  system.  :h< 
two  servo  valves  work  Independently  upon  the  control  valve.  The  control  valve  assumes  a 
"force-fighting"  position  from  the  two  servo-valve  commands  and  controls  the  hydraulic 
flow  rate  to  the  main  ram  (actuator).  The  feedback  signals  for  the  actuation  system  arc 
the  control  valve  position  (ram  rate)  used  for  damping  and  the  main  ram  position  itself. 
These  positions  modulate  a  carrier  frequency  (afewkliz)  and  after  demodulation  and  A/D 
conversion,  the  signals  are  processed  in  the  sensor  information  piocic.sing  system  as-e¬ 
clated  with  the  control  surface  actuation  for  a  cost-effective  design. 

Fig.  2.6C  shows  a  drawing  of  the  above  described  actuation  system  excluding  the  in¬ 
formation  processing.  Also,  the  fail-safe  bypass  valve  for  "slugged"  operation  In  the 
fall-nafe  condition  Is  not  required  for  essential  surfaces.  I'allmr  detection  in  the  e- 
torlng  system  Is  accomplished  by  detect  inq  excessive  transient  excursions  from  a  softwc- 
modeled  servo  system.  After  a  failure  in  one  of  the  servo-valve  I'oitiol  loops,  the  as - 
soclated  Ist-staqe  bypass  valve  opens,  tints  Isolating  the  defective  set vo-val ve .  One  ha  1 1 
of  the  control  valve  drive  Is  thereby  disabled  (bypass  opeiatton)  while  the  other  halt 
continues  to  operate.  The  overall  performance  of  the  aetuit  ton  system  is  baldly  aft-  - 


iSNJdx  i  ir  - ; j w  jAU'j  iv  u  i. linn ui. t  m 


Pig.  2 . 6D  shows  a  detailed  drawing  of  the  servo  valves  depicted  in  Figs.  2.6B  and 
2.6C  and  the  interface  to  the  information  processing  system.  The  mounting  of  the  servo 
valves  to  the  ram  assembly  is  also  shown,  upon  failure  of  one  of  the  four  signal  chan¬ 
nels,  the  valve  continues  to  operate  since  the  electromagnetic  force  summation  of  the 
remaining  three  channels  keeps  the  valve  performance  within  the  tolerance  level  of  the 
monitoring  system. 

Pig.  2.6E  shows  a  cost-effective  variant  of  the  actuation  system  described.  Here,  the 
hydraulic  intermediate  stage  driving  the  control  valve  has  been  eliminated.  Thus,  the 
associated  serve-valves  which  sum  relatively  low  electro-magnetic  forces  to  drive  the 
intermediate  stage  have  also  been  eliminated. 

This  direct-drive  servo  actuator  design  assumes  that  the  manufacturing  tolerances  of 
the  control  valve  are  such  that  jamming  is  highly  improbable.  Also,  the  electronic 
driving  stages  now  envisaged  produce  sufficient  magnetic  forces  in  the  driving  coils  to 
guarantee  safe  operation. 

Fig.  2.6F  shows  an  actuator  design  from  NATIONAL  MATER  using  a  direct-drive  control 
valve. 


3 .  CONCLUSIONS 

As  was  shown  above,  the  various  design  features  influence  the  costs  in  a  positive  or 
negative  sense  during  the  different  phases  of  the  system  life-cycle.  So,  a  cost-effective 
design  can  only  be  achieved  with  trade-off  studies. 

The  size,  weight  and  power  consumption  of  a  system  can  be  reduced  by  using  advanced 
technology  components.  The  benefit  gained  from  this  has  to  be  balanced  against  the  higher 
price  for  these  components. 

There  is  an  interactive  relationship  between  the  development  phase  and  the  oper¬ 
ational  phase.  Increased  development  effort  to  improve  reliability,  maintainability  and 
testability  of  the  system  helps  to  save  costs  during  the  in-service  phase.  Experience 
indicates,  that  the  costs  invested  into  development,  production  and  maintenance  of  a 
system  are  related  to  each  other  as  1  :  3  :  10 .  If  it  were  possible,  for  example,  by 
Increasing  the  development  effort  by  20  %  to  reduce  maintenance  costs  by  the  same  per¬ 
centage,  absolute  life-cycle  costs  would  significantly  be  cut  down.  This  indicates,  in 
which  direction  we  have  to  move  in  order  to  get  closer  towards  a  cost-effective  design. 
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FIG.  1.1  A  CONVENTIONAL  FLIGHT  CONTROL  SYSTEM 
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RESUME 

Cet  article  propose  une  m^thode  simple  pour  aider  les 
concepteura  de  aystAme  de  navigation  autonome  pour  avion 
dans  le  choix  d'une  solution  optimale  du  point  de  vue  de 
la  performance  et  du  coOt.  La  mdthode  proposAe  s'appuie 
sur  le  catalogue  des  performances  des  systAmes  de  naviga¬ 
tion  par  inertie  et  sur  dea  regies  originales  reliant  le 
prix  et  la  performance  ou  le  volume  du  syst&me  consid6r£. 

L'analyse  combinatoire  proposAe  exploite  ces  donn£es  de 
performances  et  de  coGt  en  comparant  le  coGt  d'un  systfeme 
de  navigation  inertielle  considdrd  coirnne  rdfdrence  aux 
coGts  de  solutions  regroupant  une  solution  inertielle 
moins  performante  et  un  ou  plusieurs  capteurs  d'eppoint. 

Pour  illustrer  cette  mAthode,  on  prdsente  un  exemple 
intAressant  :  celui  de  la  navigation  d’un  hdlicoptfere  de 
combat . 


1 «  INTRODUCTION 


Un  systfcme  de  navigation  autonome,  aussi  simple  soit-il,  utilfse  la  gyroscopic 
comma  rdfdrence  d* or  lent at  ion  de  sea  calculs  d'estime.  Et  e'est  le  plus  souvent  la  qua¬ 
lity  de  cette  fonction  gyroscopique  qui  constitue  le  facteur  cl£,  A  la  fois  pour  les 
performances  obtenues,  et  pour  le  coOt  resultant.  Les  progrAs  de  la  navigation  iner¬ 
tielle  ont  mis  A  la  disposition  des  "syattfmiers”  un  outil  qui  peut  pratiquement  appor- 
ter  une  solution  complete  A  tout  problAme  de  navigation  autonome.  Mais  les  considera¬ 
tions  de  cout  conduisent  A  diffArer  le  plu9  longtcmps  possible  le  recours  A  cette 
"panache”,  et  4  essayer  de  se  satisfaire  de  systAmes  gyroscopiques  moins  performants, 
mais  Haid4s"  par  d'autres  rAfArences  de  navigation  :  enaent i e 1 1 ement  le  cap  magnAtique 
et  le  radar  Doppler.  Entre  la  navigation  inertielle  In  plus  performante  ( t yp i quement , 
0,1  A  0,3  Nm/h)  et  le  navigation  4  l'estime  la  plus  rustique,  la  quality  de  la  gyros- 
copie  varie  de  plus  de  deux  ordrea  de  grandeur,  ce  qui  ne  se  reflate  pas  en  totality  an 
niveau  des  prix,  heureusemen t .  L'objet  de  cette  presentation  est  d'apporter  des  A1A- 
ments  quantitatifs  et  loglques  sur  les  rapports  qui  existent  entre  les  spAci f icat ions 
de  performances  de  1  1 u t i 1 i sa t eur ,  et  le  prix  du  systfeme  de  navigation  autonome  optimal 
qui  rApond  A  ces  specifications.  Ces  considerations  se  fondent  sur  les  technologies  qui 
constituent  "  1  '  A  t  a  t  de  1 '  a  r  t "  en  ce  milieu  des  annees  1980. 


2.  DOMAINE  COUVERT  PAR  CETTE  PRESENTATION.  ET  APPROCHC  ADOPTEE 


Dans  cette  p  resen  t  a  t  i  on  ,  on  met  pr  i  nc  i  pa  1  emen  t  1'm-rrnt  :nn  len  systAmes  de  navi¬ 
gation  A  l'estime  (dont  la  navigation  inertielle  const  i  I  ue  le  "limit  de  qammo"),  sans 
^carter  cependant  le  cas  de  balisages  rad i oA 1 ec t r i ques  on  npl iqupn  externes  A  1'aAro- 
nrf ,  En  pa  r  t  i  cu  1  ier ,  on  traite  du  cas  de  "naviqotinn  n-lnt  iv"  quo  constitue  une  navi¬ 
gation  A  l'estime  se  deroulant  entre  deux  reralaqcs.  I«n  en**trurr  qui  entrant  en  jr>i 
sont  done  gyroscopiques  et  acce  leromet  r  i  quen ,  d'une  part,  o  t  rnpteurs  de  vitesse 
route/cap,  de  l'autre  (radar  Doppler  ou  anA  mnmA  t  r  i  e ,  eep  magoA  t  i  gue )  pour  ce  qui  est 
des  mo  yens  ou  t  oiiodr  s  ,  et  GPS  NAVSTAR,  OMEGA,  VO  It  -  PMf  ,  TAi  AN,  r  e  r  a  1  a  ges  opt  i  fpie  , 

comma  nide?i  A  une  navigation  non  autonome. 

In  demarche  gAnArale  de  la  presentation  **st  In  'mi  viml  c  : 

-  pour  tout  nyatAme  do  ciqv  [ijnl  Iom  ronv  en»ih  1  ement  np^rifirt  (»|  no  huirnll  un  ciiimv.i 
pour  aider  I'utllisateur  A  f  a  i  re  "ennv  nnal*  I  •  men  t  M  ce  t  1  r  «p  A*  i  f  i  »n  I  i  )  ,  i  l  ex  i  s  I  •'  •  ir, . 
no  1  ii  t  t  on  I  ii  e  r  t  i  r  I  I  a  pure  r  A  poo  dan  t  an  p  v  ol»  I  •’•mi-  ,  mn  I  •>  r A  jm  I  A  «•  "  I  i  »p  •  l<  ■**  t-  r  '*  ,  el  d  ••  \  * » ' « ' 
f  i»  i  i  e  I  1  nt*  |  e  t  de  propositions  de  i  emp  l  m  emi-i.  t  , 
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-  ces  solutions  de  remp 1 acement  sont  recherchbes  sous  la  forme  d'une  "fonction  iner¬ 
tielle"  ausai  dbgradbe  que  possible,  aais  "aidbe"  par  des  capteurs  d'  "appoint”, 

-  faisant  alors  le  bilan  du  coCit  rbduit  que  reprbsente  le  passage  6  une  "fonction  iner- 

tielle  dbgradbe",  et  le  coOt  accru  que  repr^sente  I’adjonction  de  "capteurs  d 1  ap  - 

point",  on  essaie  d'bvaluer  le  bbnbfice  global, 

-  cette  demarche,  supposbe  s' effectuer  de  fagon  iterative  entre  "client"  et  "fourni3- 
seur"  (reprise  des  specifications,  etc),  doit  aider  b  determiner  une  solution  opti- 
male  du  point  de  vue  perf ormance/co&t . 


3.  ELEMENT  DE  BASE  >  LA  PANOPLIE  DES  SOLUTIONS  INERTIELLES 


Le  tableau  est  un  tableau  &  double  entree  oti  cheque  colonne  (repbrbe  de  A  b  E) 
reprbsente  une  "claase  de  performance"  de  rbfbrence  inertielle.  La  premiere  ligne  de 
cheque  colonne  rappelle  le  domaine  de  performance  exprimb  en  erreur  de  position  (milles 
nautiques  par  heure  b  1  sigma).  On  volt  que  seule  la  partie  centrale  du  "spectre"  des 
performances  possibles  a  hth  retenue  puisque  : 

-  il  exiate  des  centrales  inertielles  trois  fois  plus  precises  que  celles  de  la  "classe 
A"  dont  fait  btat  le  tableau, 

-  b  l'autre  extrbme,  il  existe  des  systfemes  gyroscopiques  beaucoup  moins  performants 
que  lea  30  NM/h  dont  il  eat  fait  btat  pour  la  "classe  E". 

Cependant,  le  tableau  tel  qu 1 i 1  est  couvre  la  grande  majority  des  cas  usuels,  et 
bvite  une  trop  grande  complexity. 

Dans  les  lignes  2  b  7,  on  liste  lea  performances  qu'il  est  souhaitable  de  spbci- 
fier  pour  tout  systbme  de  navigation  autonome,  outre  la  prbcision  de  navigation  expri- 
mbe  en  milles  nautiques  par  heure.  C'est  b  ce  niveau  que  doit  intervenir  un  "guide  du 
client"  pour  aider  b  la  spbc i f ica t ion .  En  bref  : 

La  ligne  1  spycifie  l'erreur  de  position  absolue  (coordonn«?e9  terre9tres)  b  long 
terme  souhaitye  pour  le  systbme  de  navigation.  Ce  systbme  pourrait  par  exemple  btre  b 
erreur  born6e  dans  le  temps,  mais  trba  bruitye  b  court  terme.  On  exprimerait  alors  dans 
la  ligne  1,  b  la  fois  la  hauteur  du  bruit  tolbrbe,  et  la  durye  de  la  mission  (supposye 
durer  au  moins  1  heure,  puisqu'on  s'exprime  en  Nm/h,  et  que  la  prycision  b  moyen  et 
court  terme  est  traitye  aux  lignes  suivantes) . 

La  ligne  2  spycifie  l'erreur  de  position  absolue  (et  6 ven t ue 1 lement  relative)  en 
pourcentage  de  la  distance  parcourue.  C'est  une  notion  qui  couvre  b  la  fois  les  aspects 
"long"  et  "moyen  terme"  de  la  navigation,  pour  un  a^ronef  qui  se  dyplace  b  une  vitesse 
8uffisante  (tous  abronefa  b  voilure  fixe,  ainsi  que  la  partie  "en  route"  des  missions 
des  abronefs  b  voilure  tournante) .  Ainsi,  pour  une  centrale  inertielle  de  "classe  A", 
qui  sccumule  en  une  heure  une  erreur  de  0,3  Nm/h  et  un  dbplacement  de  300  b  600  Nm, 
l'erreur  relative  pourra  verier  de  0,3/600  =  0,05  X  b  0,3/300  =  0,1  %  de  Is  distance 
parcourue • 

Note  s  on  remarquera  que  par  rapport  b  l'exemple  numbrique  ci-dessus,  le  tableau  (ligne 
2,  colonne  A)  fait  apparettre  une  majoration  par  un  fecteur  2.  Ceci  rend  compte  de 
l'aspect  "moyen  terme"  de  la  performance  :  sur  une  demi-heure  ou  un  quart  d'heure,  la 
vitesse  inertielle  est  plus  "bruitbe"  que  son  intbgrele  exprimbe  en  Nm/h 

La  ligne  3  spbcifie  l'erreur  de  position  relative  b  court  terme,  exprimbe  en 
mbtres  par  quart  d'heure.  C'est  une  notion  qui  9'applique  pr i nc ipa 1 ement  aux  hblicop- 
tbres  dans  la  phase  "tactique"  de  leur  mission  ( dbp 1 acements  lents). 

La  liane  4  spbcifie  l'erreur  de  vitesse  /sol  inatantanbe.  On  notera  par  exemple 
que  pour  un  systbme  de  "classe  A",  cette  erreur  n'est  pas  une  simple  conversion  des 
Nm/h  en  m/s.  En  effet,  0,3  Nm/h  =  0,15  m/s,  alors  que  c'est  une  valeur  de  0,4  m/s  qui 
figure  dans  cette  colonne.  Ceci  rend  compte  du  "bruit  de  vitesse",  de  plus  en  plus 
"incompressible"  b  me sure  qu'on  eugmente  les  performances  des  centrales  inertielles. 
Noter  que  cette  ligne  trsite  pr inc ipa lement  de  l'erreur  sur  le  module  de  la  vitesse, 
l'erreur  sur  sa  direction  (l'erreur  de  route)  figurant  b  la  ligne  suivnnte. 

La  liane  5  spbcifie  l'erreur  de  route  instentanbe,  notion  applicable  aurtout  aux 
abronefa  b  voilure  fixe,  ou  b  voilure  tournante  mais  dans  In  phase  "cn  route"  de  leur 
mi  98  ion . 

La  liane  f>  spbcifie  l'erreur  du  cap  instantanb.  Binn  qu'il  s'agisse  d'un  para- 
mbtre  de  pilotage,  et  non  de  navigation,  il  est  mentlnnnb  on  tant  quo  "sous  produit" 
possible  et  spbcifiable  d'un  systbme  de  navigation. 

Ls  ligne  7  spbcifie  l'erreur  d'attitude  inatnntnnbo.  lb  encore,  il  s'aqit  d'une 
parambtre  de  pilotage  qui  peut  btre  offert  "en  prime"  par  un  systbme  de  navigation 
(c'est  mbme  l  *  un  des  principaux  intbrbta  d'une  centrale  inertielle  de  quality). 

Comma  1)  /»  btb  dlt,  specifier  correctement  cos  7  pnramMren  ont  une  t  Iche  pour 
lnquelle  le  "cllni't"  mbritn  d'itre  aldb  par  la  fnurn}  nsour  potential. 
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Lb  tableau  4  double  entree  dtant  ainsi  d^fini,  on  a  plac6  dans  chacune  de  sea 
cases  la  valeur  typique  (ou  la  plage  dee  valeurs  typiques)  6  laquelle  on  peut  s'atten- 
dre  pour  une  centrale  inertielle  pure  de  la  classe  consid£r6e  (A  4  E).  En  d’autres 
tera«*i  lea  chiffres  qui  figurent  dans  une  colonne  donn6e  aon t  coh£rents  entre  eux  pour 
une  centrale  inertielle  de  la  classe  consid^rie.  Ce  qui  ne  signifie  pas  que  l'utilisa- 
teur  potentiel  ne  peut  fournir  de  specifications  que  dans  une  seule  colonne.  Au  con- 
traire,  certainea  valeurs  splcifiies  vont  apparaltre  comme  £tent  plus  cont re i gnant es 
que  d'autrea,  et  c'eat  de  cette  conatatation  que  partira  la  tentative  d ' opt im i sa t i on 
(qui  consiate,  r appe 1 ona- 1 e ,  4  retplacer  de  la  "gyroscopie  ch4re"  par  de  la  gyroscopic 
■oini  chkre  mais  aidke,  si  possible,  et  voir  en  fin  de  compte  si  on  qayne  au  change). 


4.  ANALYSE  DCS  PERFORMANCES  ET  DES  SOLUTIONS  TECHNIQUES  ASSOC IEE5 

4.1  PERFORMANCES  SPECIF  I ABLES -  ET  POSITIONS  DE  REPLI  (figu  res  1  et  2 ) 

Une  premifere  lecture  du  tableau  peut  se  faire  comme  suit  : 

-  dans  les  colonnes  de  gauche  (en  gros,  A,'  ,C),  on  trouve  des  performances  rela- 
tivement  klev^es  qui  co r re spond ront  vraisemblabl ement  4  l'objectif  poursuivi 
par  le  client.  Ce  sont  lea  "performances  sp6c i f i ab 1 es "  . 

-  dans  lea  colonnea  de  droite  (en  gros,  D,E),  on  trouve  des  performances  relati- 
vement  basses  que  le  client  demandera  rarement  rn  tant  que  tel les,  mais  don* 
" i 1  pourra  se  contenter"  (position  de  repli)  ni  on  lui  d^montre  qu'avec  I'airte 
de  capteurs  d'appoint,  on  peut  passer  d'une  centrali*  inertielle  de  classf* 
61ev6e  4  une  centrale  de  classe  plus  faible  (et  iddalement,  la  plus  faihle 
possible,  pour  des  raisons  de  coOt ) . 

Plus  pr6cis£ment  la  repartition  suivante  est  trfen  probable  : 

Performances  splcifiables  : 

Colonne  A  et  colonne  B  entikres 

Colonne  C  4  1 'exception  de  C3  £ v en t ue 1 1  erne n t 

Cases  D6  et  07 

Performances  "de  repli": 

Colonne  E  entifcre 

Cases  Dl,  02,  03,  04. 


4.2  PERFORMANCES  SPECIF IABLES  NECESSITANf  UNE  CENTRALE  TNfRTlEtU  figure  3' 

5i,  dans  le  tableau,  le  client  spScifie  une  ou  plusieurs  d**s  "esses"  que  noun 
•  lions  lister  ci-apr&s,  il  spkeifie  du  mAme  coup  un  system*-  inert  iel  de  la  clar>s»*  dr 
performance  correspondent  4  la  colonne  cochde,  sans  qu '  \  1  v  nit  d' a  1  t  emit  i  vp  possible. 
Les  raisons  n'en  sont  cependant  pas  tou jours  les  m£mrs  : 

Cases  4 A «  5At  5B.  5C.  6A.  6B.  7A.  78.  7C 

Dana  chacun  de  ces  cas,  la  centrale  inertielle  er.t  i  •  >  hp»I  capteur  4  poi.vu  • 
fournir  le  psramktre  avec  la  precision  indiqule.  Plus  pr*4.  moment  : 

4  _ A  *  tout  radar  Doppler  est  tr op  bruits  pour  p ouvoir  fo-iuijr  une  viteaae  instant 

aunsi  lisse  ;  la  centrale  inertielle  ent  i  nd  i  np^nsnM  »* ,  nr  serait-ce  que  pout 
"lissrr"  le  Doppler. 

5  A  ,  5B .  5C  :  la  centrale  i  ne  rtielle  est  la  aeu  l  r  f  r*  n»  >  dr  rout  n  4  bord;  4  d£  f  an  *  , 

on  peut  utiliaer  une  rkfkrence  dr  cap,  main  rn  f'ninant  l'hypothfcse  d'tm 
angle  de  derive  nul,  ce  qui  prut  ocean  inn  nr  r  unr  errmr  consequent e 
prohablemrnt  mftme  supdrieure  4  la  valeur  qui  ■<»>  t  rnuvr  dans  la  rise  SO, 
qu'  on  pourrait  alors  rattacher  aim  p  r«*  ct  den  t  r  s  '  . 

6 A «  6B  :  pour  le  cap  ( q4ograph i que ) ,  la  aeule  alternative  4  In  centrale  inertielle  ent 
un  cap  gy r oma qn6 t i que ,  dont  la  precision  (en  terrnes  dr  cap  g£ogr aph i que 3 
n’otteindra  pas  mieux  que  le  degr£. 

7A ,  7B .  7C  i  pour  une  precision  d’attitude  meilleurr  que  n,S°,  il  n’v  a  pas  d'altrrnn- 
tive  aux  centrales  inertiellen. 


4.3  SOLUTIONS  DE  RTPL 1  SO HI  ANT  DU  CADRE  D'UNE  NAVIGATION  AUT0N0ME  \ figure  4) 


Parmi  les  performances  qu' on  peut  specifier  4  1'nide  du  tableau,  il  rn  rst  qi 
peuvent  M  re  ntteintea  autrement  qu'avec  une  navigation  nutonome  t  ce  Hern  rnnrntiell< 
men!  ever  l *  a  I de  d'une  radiol oca 1 1  net  Ion  on  d’uno  1  urn  1 1  an I 1  on  par  vole  optlque.  If  « 
eat  a  I  nn  i  pour  1  en  llqnen  1  ,  2  el  1  du  tahleitu.  In  effet  i 
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tiqne  1  t  ai  on  se  contente  de  specifier  une  precision  de  position,  un  moyen  de  radio- 
localisation,  ou  de  recalage  optique,  pourra  toujours  faire  l'affaire. 
Certes,  des  aides  du  type  VOR-DME  ou  OMEGA  auront  des  difficulty  4  garantir 
une  precision  6quivalente  &  celle  dea  centrales  inertielles  de  classe  A,  B 
( ou  mftme  C)  sue  des  dur6es  de  mission  de  une  b  quelques  iieures.  Mais  on 
pourra  alors  songer  au  GPS  NAV5TAR  ou  aux  recalages  optiques.  Done,  pour  une 
specification  situ6e  sur  cette  ligne,  on  peut  toujours  trouver  une  solution 
autre  qu'autonome,  mais  qui  sort  par  consequent  du  cadre  de  la  pr6sente 
ft tude . 

Ligne  3  :  mftme  situation,  globe  1  ement ,  que  pour  la  ligne  1.  Noter  que  la  precision  de 
200  mfttres  sur  15  minutes  est  dftj4  difficile  &  obtenir  ever  les  meilleures 
aides  radios lectriques  4  la  navigation  (GPS  NAVSTAP  en  neefts  "tous  utilise- 

teura" ) . 

Ligne  2  s  pourrait  fttre  assimilfte  aux  deux  ligne3  prftcftdentes,  4  ceci  pr4s  que  la  spe¬ 
cification  en  %  de  la  distance  parcourue  favoriae  les  solutions  inertielles, 
car  elle  eat  draconienne  pour  les  aides  radios lect riquea  bruitftes  A  court 
terme.  Si  on  veut  rftellement  specifier  des  precisions  en  %  de  la  distance 
parcourue,  il  est  beaucoup  de  cas  oO  la  seule  solution  est  inertielle  ( ne 
serait-ce  que  parce  qu'un  angle  de  route  precis  est  n^cessaire)  . 

4.4  PERFORMANCES  POUVANT  ETRE  SATISFAITES  SAMS  CENTRALE  INERTIELLE  (figure  5) 


Ce  sont  es sen t i e 1 1 emen t  cellea  des  colonnes  D  et  E  du  tableau.  En  d'autres 
termes,  ce  que  peuvent  procurer  lea  centrales  inertielles  de  bas  de  gamine  peut  aussi 
fttre  obtenu  par  d'autres  moyens.  Par  exemple  : 

Cap  et  attitude  instantanfts  (lignes  6  et  7)  :  au  niveau  de  performances  de  2°  (case  06) 
A  7*  (case  E6)  en  cap,  ou  de  1°  (case  D7)  &  3°  (case  E7)  en  attitude,  les  gyroscopes 
di rec t ionne Is  et  de  verticale  rftpondent  4  la  question. 

Route  inatantanfte  (ligne  5)  s  au  niveau  de  performances  de  7°  6  20°  (case  E5)  en  route 
instantanfte,  assimiler  route  et  cap  (obtenu  par  rftfftrence  magnfttique)  rftpond  4  la  ques¬ 
tion.  Ce  qui  est  dftj4  beaucoup  plus  sujet  4  caution  pour  une  precision  de  2®  4  7°  (case 
D5). 

Vitesae/sol  instantanfte  (ligne  4)  :  pratiquement  toutes  les  performances  de  la  ligne  4 
peuvent  fttre  apportftea  par  un  radar  Doppler,  4  l'exception  des  0,4  m/s  de  la  case  A4 , 
et  ceci  plus  pour  des  raisons  de  bruit  4  court  terme  du  radar  Doppler,  que  d'erreur 
moyenne  de  ce  dernier  (nftcessitft  d'un  lissage  inertiel).  En  outre,  cette  ligne  ne 
concerne  que  le  nodule  de  la  vitesse,  ce  qui  est  rorement  utile  sans  information  de 
route  (ligne  5)  ou  on  retrouve  le  besoin  d'une  centrale  inertielle. 

Position  relative  b  court  terme  (ligne  3)  :  4  portir  de  la  performance  1000m  / 
15  minutes  (colonnes  C,D,E),  un  systftme  de  type  radar  Doppler  +  cap  gy romagnft t i que  est 
suf f isant . 

Precision  de  position  4  woven  terme  (ligne  2)  :  seulcs  les  performances  des  colonnes  D 
et  E  (done,  plus  de  3  %  de  la  distance  parcourue)  peuvent  fttre  ntteintes  sans  risque 
par  des  moyens  non  inertiels  mais  autonomea  (Doppler  plus  cap  gy romagnft t i que ) .  La  per¬ 
formance  C2  (  1  b  2  %  de  la  distance  parcourue)  n'est  obtonue  que  marg  i  na  1  ement  ,  car 
elle  est  trfes  exigeante  pour  le  cap  gy romagnft t ique  utilise  en  capteur  de  cap  gftograph- 
ique  (adjonction  de  la  dftclinaiscn  magnfttique,  perturbations  mngnfttiques  di verses  etc). 

Precision  de  position  b  long  terme  (ligne  1)  :  si  on  rente  dans  le  domaine  de  la  navi¬ 
gation  autonome,  seule  la  performance  El  (30  Nm/b)  et  mnrg  i  nn  1  emrnt  la  Dl  (10  Nm/h) 
peuvent  fttre  obtenuea  par  des  moyens  non  inertiels 


4.5  RAPPEL  DES  CAS  MARC1NAUX 


Ce  rappel  e3t  intftresaant  car  il  situe  la  ligne  de  pnrtnqe  den  performances  entre 
solutions  inertielles  et  non -inertielles,  et  marque  done  une  "ligne  de  front"  dans  la 
bataille  pour  1  '  opt  imi  sa  t  ion  du  rapport  performances  /  prix.  Ainr.i,  il  apparatt  que  le 
be80 in  d'une  centrale  inertielle  commence  b  se  faire  sentir  quand  on  en  arrive  6  deman- 
der  des  performances  ftgales  ou  supftrieures  4  : 

-  10  Nm/h  en  precision  de  la  position  abaolue  4  lonq  terme, 

-  1  4  2  %  d'erreur  de  position  relative  4  la  distance  parcourue, 

-  600  m  d'erreur  de  position  relative  pour  15  minutes  de  mission  dans  une  zone  tact  ique 
de  dimensions  limitftea, 

et,  en  ce  qui  concerne  leo  paramfttres  de  pilotage  : 

-  2®  4  7*  pour  In  precision  de  la  route  inatantanfte, 

-  1*  aur  la  prftniulon  du  cap  inatantanft, 

-  0,5*  nur  In  precision  de  l’attltude  fnetentanfte. 
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4.4  PERFORMANCES  SPEC  IF  I ABLES  POUVANT  ETRE  ATTEINTES.  SPIT  EM  "INERTIE  PURE" ,  SPIT  EN 
"INERTIE  DEGRADEE  AIDEC"  (figure  6) 

On  liste  ci-aprfes  les  "cas  de  base”  (inertie  pure)  et  lea  solutions  de  repli  pos¬ 
sibles,  en  se  r4ferant  aux  cases  du  tableau.  Ainsi,  par  exemple,  la  case  A1  (0,3  N  m  /  h  ) 
affiche  une  performance  qui  peut  fetre  etteinte  en  inertie  pure,  mais  &gelement  avec  u n 
GPS  f i 1 t r6  par  une  centrale  inertielle  de  classe  E,  ou  par  des  recalagea  optiques  avc-^ 
interpolation  aasur^e  par  centrale  inertielle  de  classe  C  ou  D.  On  notera  ceci  : 


A1 

- > 

ft 

CPS  +  £ 

ou 

• 

Optique  +  C  (ou  D)  et  de  m&me: 

B 1 

- > 

. 

OMEGA  ou  VOR/DME  ou  TACAN  +  E 

ou 

ft 

Optique  ♦  C  (ou  D) 

Cl 

- > 

• 

OMEGA  ou  VOR/DME  ou  TACAN  +  "F“ 

ou 

* 

Optique  +  D 

01 

:  rappel  : 

# 

marginalement  realisable  par  Doppler  +  cap 

gyromoqn&t  ique 

* 

peu  demand^  en  tant  que  "specification  positive" 

De 

m&me  pour 

1  a 

ligne  2  : 

A2 

- > 

• 

GPS  +  C  (ou  D) 

ou 

* 

Optique  ♦  8 

B2 

- > 

» 

Doppler  +  C 

ou 

* 

Doppler  ♦  optique  +  D  ( ou  E) 

C2 

- > 

* 

Doppler  ♦  D 

ou 

* 

Doppler  +  optique  +  E 

OU 

( rappel )  : 

marginalement  r&alisable  avec  Doppler  cop 

gy  romagn&  t ique 

Oe 

m&me  pour 

la 

ligne  3  s 

A3 

- > 

• 

GPS  +  E 

ou 

• 

Optique  +  C  (ou  0) 

B3 

- > 

* 

CPS  +  E 

ou 

» 

Optique  +  C  (ou  0) 

ou 

(rappel)  : 

marginalement  realisable  avec  Doppler  +  cap 

gyromngn&t ique. 

4.7  RECAPI TUI ATION  PE  L '  ANALYSE  CPHBINATOIRE  PFS  PERFORMANCES  REAL ISEE  CI-PESSU5 

1.  Dans  le  tableau,  on  a  recenstf  les  paramfetres  dc  performances  sp&cifiables  (  1  i  g  n  e  s  ) 

et  leurs  ordres  de  grandeur  num&riques  pour  le  cas  ou  on  se  propose  de  les  ohtenir 
en  inertie  pure.  Le  tableau  permet  done,  en  pointont  les  cases  co  r  re  spondan  t  ot;> 
performances  deman d6es,  de  savoir  quelle  classe  dc  centrale  (not&r  de  A  A  F)  sera  it 
n&cessaire  pour  obtenir  en  inertie  pure  iesdites  performances. 

2.  Dans  le  §  4.2  (ci-dessus),  on  a  recensd  cellos  de  cer,  performances  qui,  de  tout- 

fagon,  ne  peuvent  Itre  obtenues  qu'en  inertie  pure  (pas  de  "solution  de  repli"). 

3.  Dans  le  §  4.3  (ci-dessus),  on  a  recens£  ceJlea  des  performances  qui  peuvent  &t  re 

atteintes  en  recourent  b  des  aides  b  la  navigation  extern os  (non  autonomie).  1’ 
s'agit  done  d'  un  sou s- ens t mb  1  e  du  groupe  de  pnrf  ormnnron  pour  lesquelles  on  per 
envisoqer  une  "solution  de  repli"  autre  qu 1  inert i el le . 

4.  Dans  le  §  4.4  (ci-dessus),  on  a  recensS  cel  les  des  performances  qui  peuvent  f 

atteintes  sans  recoura  A  une  centrale  inertielle,  et  dans  le  parog raphe  suivjnt  '  * 
4.5),  on  n  pas  36  en  revue  les  "performances  marginoler, "  A  partir  desqnelles  1*  intro¬ 
duction  d  1  une  centrale  inertielle  commence  A  se  f/iirr  sentir. 


5.  Enfin,  dans  le  §  4.6  (ci-dessus),  on  a  reoens&  cellos  d»»n  performances  qui  peuv*  <  \ 
&tre  atteintes,  soit  en  inertie  pure,  soit  en  "inertie  d<5qrnd£e  sid&e",  ce  qui  donn»* 
alors  matiftre  4  compromis  et  opt imi sa t i on . 

A  rotte  combinntoire  des  performances,  il  faut  maintenant  ajuuter  la  rnrobinnl ni r- 
des  cofil  s  r:o  r  r  e  spondan  t  s  ,  objet  des  paragraphen  suivnnts. 


5.  com  prr,  centrales  inertielles  en  fonctirn  or  murs  pi  ri  orman c is 


Les  considerations  qui  suivent  s’nppuient.  nur  une  mrfmno  ronna  i  ssance  des  pri* 
de  march&  qui,  b  long  terme,  reflfetent  les  cofita  "physiques",  dn  n'n  done  pas  e  • ,  s  e  v  ^ 
proc^iler  de  mnniferp  analytique,  en  exnminnnt  le  contenu  des  nyst&mps  et  lea  technnlt* 
glen  en  emno.  Mala  cob  cons  1  dA  r  a  t  i  nnti  t  ec  hno  l  nq  i  quen  n*»nt  eiiq  l  otn'es  at  hoiih  -  J  a  1  e  n  t  -  •. 
dnnn  la  present  at  Ion  qui  eat  faite  dea  clannea  de  per formnnees  den  rent  rales  inert  i*i 
lea.  f’nr  exemple  1 
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-  pour  lea  centrales  de  classe  A,  on  sait  que  les  pla t es- f omes  6  gyroscopes  accordEs 
de  haute  precision,  ou  avec  gyroscopes  fe  suspension  Electrique,  rEpondent  &  la 
question,  pour  un  certain  prix  de  marchE.  C'est  ce  prix  de  marchE  qui  a  EtE  EvaluE, 
sans  qu'on  cherche  ici  A  savoir  laquelle  des  deux  solutions  l'atteint...  avec  le 
neilleur  profit  pour  le  fournisseur. 

-  pour  lea  centrales  de  classe  B,  on  sait  que  les  plates-f ormes  6  gyroscopes  accordEs, 
ou  les  centrales  &  gyrolasers,  rEpondent  6  la  question.  LA  encore,  on  connait  un  prix 
de  marchE,  qui  couvre  les  deux  cas  de  te  .hnologi e  pour  1' usage  que  nous  avons  &  en 
faire . 

-  les  centrales  du  groupe  C  peuven t  Etre  k  plate- f orme  avec  gyroscopes  accordEs,  ou 
"strap-down"  &  gyroscopes  accordEs,  ou  gyrolaser  de  pErimEtre  rEduit  etc.  Le  prix  de 
marchE  cor  respondent  h  cette  classe  de  centrales  a  EtE  par  definition  posE  Egal  &  1, 
dans  la  mesure  oG  il  reprdsente  le  "cas  central"  du  tableau  et  de  la  gamme  de  perfor¬ 
mances  qu'il  reprEsente.  Done  : 

L'unitE  de  coOt  utiliate  pour  le  suite  de  le  prdsentetion  eet  le  coOt  d'une  central* 
inertialle  de  "cleeee  Ca  melon  le  ddfinition  du  tableau. 

-  les  centrales  des  groupes  D  et  E  sont  en  fait  plutftt  des  systfemes  gy  roscop  iques  de 

relat  i  vement  basses  per  romances ,  auxquels  on  ne  demande  pas  vraiment  un  fonctionne- 
aent  autonome,  aais  plutftt  une  fonction  de  lissage  ou  d ' interpolat ion  entre  reca- 
lages.  Le  tableau  aentionne  nEanmoins  leurs  "performances  fictives"  en  inertie  pure. 

Ayant  ainsi  fixE  l'Etalon  de  coOt  comma  Etant  celui  d'une  centrale  de  claaae  C, 
le  premier  pas  consiste  ft  trouver  une  formula  donnant  le  coCit  reletif  des  centrales  de 

classes  A,  B  (co fit  >  1)  et  D,  E  (co Ofc  <  1).  En  posant  que  : 

-  (Nm/hp)  a  3  (milles  nautiques  par  heure)  =  precision  de  la  centrale  de  classe  C 

-  ( Nm/h )  s  precision  an  Nm/h  de  la  centrale  dont  on  veut  connaltre  le  coGt 

-  Co  =  1  =  coOt  de  la  centrale  de  classe  C 

-  C  =  coGt  de  la  centrale  dEfinie  par  eon  paramEtre  de  precision  (Nm/h) 

Nous  propoaons  la  formule  suivante  t 

C/Co  (=  C/1  =  C)  =  [(N«/h0)/(Nm/h)]  « 

avec  x  compris  entre  0,30  et  0,35 

Le  tableau  qui  suit  donne  les  valeurs  numEriquea  pour  deux  valeurs  extremes  et 
une  valeur  mEdiane  de  x,  A  titre  de  "jeu  d'essai"  : 


1 

CLASSE  DE  PERFORMANCE  1 

_  i 

A 

1 

B  1 

C 

1  D 

1 

F. 

1 

Nm/h 

1 

0,3 

1 

i  i 

3 

i  io 

1 

30 

1 

1 

CoOt  «v«c  x 

=  0,30  1 

1,99 

1 

1,39  1 

1 

1  0,7 

1 

0,5 

1 

1 

CoOt  avec  x 

=  0,33  | 

2,13 

1,4*  1 

1 

i  0,67 

1 

0,  A7 

1 

1 

CoGt  avec  x 

-  0,36  I 

2,29 

1 

1,48  | 

1 

i  0,63 

1 

0,44 

1 

L'idEe  qui  ae  dEgage  de  ce  tableau*  c'est  que  lorsqu’on  nuqmente  le3  performances  d'un 
demi  ordre  de  grandeur  (fecteur  de  l'ordre  de  3),  les  coGts  sont  augment's  de  AO  % 
environ.  Pour  gagner  un  ordre  de  grandeur  (facteur  10),  il  f  nut.  phm  que  doubler  le 
coGt.  Certea,  cette  loi  du  type  (log  a)  s  k.(log  b)  n'n  rien  de  phynique,  maia  elle 
rend  approx ima t ivement  compte  d'une  relation  cnGt/pe r f o rmnncp  nur  l'Etendue  de  deux 
decades  (facteur  100  aur  lea  performances).  Et  elle  rappel le  per  ait leurs  les  lois  de 
Wright  qui  s'appliquent  aux  d^crolssances  de  coGt  de  product  ion  en  fonrtinn  du  rang  (le 
coGt  eat  multipliE  par  x  <  1  chaque  foia  que  le  rang  double)  et  qui,  hien  que  n'ayant 
rien  de  physique,  rendent  nEanmoins  d'eatimable3  snrvirnn  dnna  lea  Evaluations  de 
coGts . 


5 •  1  IIT IL1SAT10N  PIRECTE  PE  LA  FOKHULE  CPUT/PERFORMANCES  POUR  CENTRALES  INERTIELUS 

En  regardant  le  tableau  du  §  5  ( c  i  -  dessus )  ,  le  npEr  i  f  i  r»»t  eur  vo»t  directement  ce 
qu'il  en  coGte  de  specifier  une  performance  BupErieure  pnr  exemple  d'un  demi-ordre  do 
grandeur  E  ce  qui  eat  strict ement  nEceasaire.  Utilinnnt  In  tableau,  il  eat  aussi  en 

meaure  de  noter  quel  eat  le  paramEtre  flpEcirtE  qui  cat  "d  i  menu  i  onmint  "  en  matlEre  de 
coGt  ( en  d'outren  termea,  quel  eat  le  paramEtre  "mrneur"),  ef  pourrn  n'nttacher  A  le 
"faire  rentrer  dnnn  le  rang"  pour  pouvoir  c hoi  sir  une  rent  role  de  f-lnnne  infErleure. 

j  xemp  1  ii  t  nl  au  lieu  d'une  erreur  de  route  i  ru»  t  nut  iic»Ee  de  0 ,  S n  A  0,7*  (paramEtre 

115)  *  le  iipric  I  f  I  nit  eur  pent  ae  content  «r  d'une  pt-Er  i  n  I  on  «  ompr  I •»»*  entre  0*7*  et  7" 

(pnrnmMre  I’M,  le  roGt  pnnnnro  dti  1,AA  k  1,  ee  qui  u'enl  (*».•  du  »«"il  i»E  q  1  1  rji*  n  h  I  e . 
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5.2  UTILISATION  COHBINEE  PE  LA  EORHULE  COUT/PERFORNANCES  POUR  CENTRALES  INERT IELLCS . 
ET  DES  ALTERNATIVES  "INERTIE  PURE/INERT1E  AIDEE*  DU  i 

Prenons  l'exeapie  de  la  specification  A1  (0,3  Nm/h  en  position  A  long  terae)  qui 
paut  Atre  aatisfaite,  aoit  par  une  centrale  inertielle  de  classe  A,  soit  per  le  GPS 
asaocid  A  une  "centrale  inertiella"  de  classe  E.  Le  bilan  de  coGt  peut  se  falre  de  la 
fag  on  suivante  : 

CoOt  d'une  centrale  inertielle  de  classe  A  s  2,13 

CoGt  d'une  centrale  inertielle  de  classe  E  ;  0,47 

Credit  ("Economie  r6alis6e")  :  1,66 

D6bit  :  coOt  global  d '  un  6quipement  GPS  (antenne,  rdcepteur  etc). 

Evidemment,  il  s'agit  14  d'un  example  simpliste  r6duit  4  un  seul  parawM  re.  En 
r4alit£,  11  est  probable  qu'on  voudra  specifier,  non  seulement  la  position,  maia  aussi 
la  vitesse/sol  (module)  et  la  route.  Ce  qui  a  6t6  developed  pr6c6demment  permet  de 
proc6der  4  ce  genre  d' iterations . 

UN  CAS  D'ECOLE  INTERESSANT  t  LA  NAVIGATION  DE  L ' HEL I COPTERE  DE  COMBAT 

Le  "portrait- type"  d'une  specification  pour  h61icoptfere  de  combat  aerait,  dans  le 
langage  codd  que  permet  1 ' u t i 1 isa t ion  du  tableau  : 


C2  (navigation  en  route  =  IX  4  2\  de  la  distance  parcourue) 

83  (navigation  tactique  600m/l 5mi n )  ou  mfeme  deux  fois  mieux  si  possible  (A3?) 

B4  (vitesse/sol  instantande  1  m/a  pour  raisons  autres  que  la  navigation) 

...et  autres  param&trea  moins  determinants  pour  notre  exemple.  A  partir  de  cette  speci¬ 
fication,  on  peut  procdder  comme  suit  : 

1.  S'il  fallait  procdder  en  inertie  pure,  il  faudralt  une  centrale  de  classe  B,  dont  le 
coOt  est  de  l’ordre  de  1,44.  Ceci  4  cause  de  deux  param&tres  (lignes  3  et  4  du 
tableau) . 

2.  Cependant,  on  salt  que  le  paramttre  N°  3  (position  relative  4  court  terme)  peut  fctre 
obtenu  avec  une  centrale  de  classe  E  aidde  par  GPS,  ou  de  classe  C  ( ou  D)  eidde  par 
recaleges  optiques  de  position.  Quant  au  parambtre  N*  4  (module  de  la  vitesse/sol), 
le  radar  Doppler  suffit.  Quant  4  la  specification  "de  second  rang"  C2  (navigation  4 
1-2*  de  la  distance  parcourue),  elle  peut  aussi  fttre  aatisfaite  par*  une  centrale  de 
classe  D  aidde  par  Doppler,  ou  bien  E  aidde  par  Doppler  et  recalages  optiques.  De  la 
combine toire  de  tout  ceci,  il  resaort  que  : 

3.  On  peut  i"troduire  le  Doppler  pour  satiafaire  4  la  specification  04,  qui  n'implique 
plus  alors  pour  elle-mfeme  la  presence  d'une  centrale  inertielle. 

4.  Mais  cette  centrale  inertielle  reste  tout  de  mfeme  ndceasaire  pour  sstisfaire  4  le 
specification  B3 .  Dans  ce  cas,  deux  poasibilit6s  : 

-  il  suffira  qu'elle  soit  de  classe  E  si  on  a  par  ailleurs  le  GPS, 

-  il  faudra  qu’elle  soit  de  classe  C  ( ou  D,  4  la  rigueur)  si  on  veut  proctfder  par 
recalages  optiques,  en  lieu  et  place  de  GPS. 

3.  Par  ailleurs,  le  Doppler,  suppose  introduit  pour  satisfaire  4  B4,  permet  de  passer 
d'une  centrale  de  classe  C  4  classe  D  (ou  mSme  E)  pour  aatisfaire  4  la  sp^ci f ice t i on 
C2  . 

Ainsi  se  t  rouvent  confront6e3  les  possibility  suivnnten  : 

-  centrale  classe  B, 

-  Doppler  ♦  recalages  optiques  ♦  centrale  classe  D  (mi  F), 

-  GPS  (  f ourn i ssant  aussi  vitesae)  ♦  centrale  clnnne  F 
(revenir  14-dessus  "en  smont"). 

Et  le  probl&ma  sera  de  savoir  al  le  passage  d'une  centrale  inertielle  de  classe  n 
4  une  centrale  de  classe  D  "paie"  le  coGt  d'une  Doppler  el  des  recn1age9  optiques  de 
navigation,  ou  si  le  passage  d'une  centrale  de  eliinno  M  n  une  qyrnncopte  de  clause  F 
"paie  encore  mieux"  le  coGt  d'une  GPS  et  den  rernlngen  optiques. 

En  premjfero  approximation,  on  peut  dire  ce  qui  suit  : 

A  .  Com para  1  non  centrale  classe  B/centrale  clause  D  _♦  Do up  lor  ♦  reca I  age  opt . 
Differential  de  coGt  centrale  clnsae  H  -  rnnlrnlu  el  untie  f)  t 

1,44  -(!,/»  7  s  *1 ,  7  7 
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Pour  quo  la  solution  4  radar  Doppler  +  recalagea  de  position  soit  aventageuse,  il 
feut  que  le  coOt  de  ce  radar  et  du  diapositif  de  recalage  optique  associd  aoit 
infdrieur  4  0,77  (aoit  0,77  fois  le  coOt  d'une  centrals  aioyenne  de  la  clasae  C, 
c'ast-4-dire  3  Na/h).  En  principe,  c'est  le  caa  ai  on  ne  conaidkre  que  le  coOt  du 
Doppler  sans  lea  Praia  aesocida  (ndceaaitd  d'une  ouverture  ventrale  etc),  et  ai 
on  coapte  pour  rien  le  coOt  des  recalagea  optlquea  ("11  auffit  de”  pasaer  aur  dea 
repkrea  terrestrea  convenua  k  l'avance).  C'est  la  raison  pour  laquelle  cette 
solution  eat  habituellenent  retenue.  Clle  prdaente  peut-fttre  des  "cobts  opdra- 
tionnela”  noine  facileaent  quantif iablaa  (aides  accrus  aur  la  position,  rdaultant 
dea  aldaa  de  recalagea,  charge  de  travail  accrue  etc),  aais  ceci  aort  du  cadre  de 
notre  dtude. 

B.  Coaparaiaon  centrale  clasae  B/centrale  claase  E  +  GPS 

Difftf rentiel  de  coOt  centrale  claase  B  -  centrale  clasae  E  : 

1,44  -0,47  s  0,97 

Pour  que  la  solution  4  GPS  soit  avantageuse,  il  Taut  que  le  coOt  du  GPS  et  de  son 
installation  ( implantation  et  asaerviaaeaent  d'une  antenne  directive  en  un  lieu 
favorable  de  l'appareil  etc)  soit  infdrieur  4  0,97,  soit  pretiquement  celui  d'une 
centrale  inertielle  de  claase  C  (3  Na/h).  Outre  ce  coOt  financier,  le  spdci ficeteur 
conaiddrera  auaai  le  coOt  opdrationnel  d' avoir  un  systkae  dont  l'autononie  eat 
rdduite  4  presque  zdro  (tout  au  plus  quelques  minutes  en  css  de  perte  du  CPS).  Mala 
14  encore,  ceci  n'eat  paa  quantifiable  et  ne  peut  done  &tre  pris  en  coapte  dans 
cette  dtude. 

Note  i  Une  solution  avec  Doppler  ♦  GPS  ♦  "centrale  Inertielle"  claase  t  eat  en  prin¬ 
cipe  4gale«ent  env iaageable .  11  faudrait  alors  que  le  coOt  combind  du  Doppler  et  du 
GPS  aoit  infdrieur  &  0,97,  ce  qui  aemble  trfea  improbable. 


5.5  AUTHES  EACTEUHS  E OWOAWEHT AUX  POUR  UME  ETUDE  PE  COUTS  t  LE  VOLUME  DES  EQUIPEMCNTS. 
ET  U  QU4MTITE  tv I  EN  EST  PH00U1TE 


Dans  tout  ce  qu'on  a  considdrd  Jusqu'ici,  lea  centrales  inertielles  dtsient 
carectdrlsdes  par  un  aeul  paraaktre  i  leura  performances.  Ce  qul  felsalt  lap  1 1 c 1 teaent 
l'hypothkse  i  "toutea  choaea  dgalea  par  allleura”.  Paral  lea  chosea  qui  peuvent  ne  pas 
4tre  dgalea  par  allleura,  11  y  en  a  au  aolna  deux  dont  1'incidence  aur  lea  coOts  eat 
priaordlale,  et  en  tout  cas  d'ordre  de  grandeur  comparable  4  ce  dont  on  vlent  de 
traiter  Jusqu'ici  >  il  s'agit  du  volume  alloud  pour  1 ' dqu ipeaent ,  et  de  la  quantitd 
d* dquipeaenta  4  produire. 

En  ce  qul  concerne  lee  ouantltda.  chacun  eat  maintenant  familiariad  avec  lea 
foraules  de  Wright,  du  type  i 


c/c„  *  ( o0/Q )  y 


avec  r 

-  C„  =  coQt  pour  la  quantitd  <J0 

-  C  *  coOt  pour  la  quantitd  Q 

-  y  (expoaant)  =  paraaktre  de  ddcroiaaenca  des  coCits  en  fonction  de  la  quantitd,  expri- 

aant  per  exeaple  que  lea  coOts  sont  multiplids  par  0,9  quand  lea  quan- 
tltda  doublent. 

Dana  le  caa  dea  centrales  inertielles,  une  telle  formule  peut  Stre  considdrde 
comae  applicable  dans  lee  lialtea  et  avec  lee  ordres  de  grandeur  suivsnts  i 

-  80  x  500 

-  Q  coaprls  entre  50  et  5000 

-  y  coapria  entre  0,07  (lea  coOts  baiaaent  de  5  *  quand  lea  quontitda  doublent)  et  0,24 
(lee  coOta  baiaaent  de  15  X  quand  lea  quantitda  doublent),  avec  une  valeur  addiane 
autour  de  0,15. 

En  ce  qul  concerne  lea  volumes  allouda  pour  lea  centrales  inertiellea.  1'incidence  aur 
lea  coOta  eat  trka  laportante.  On  peut  edaettre  une  formule  du  type  ! 

C/C0  =  <V0/V>* 

applicable  dens  lea  lialtea  at  avec  lea  ordres  de  grandeur  auivnntn  : 

-  V0  m  17  litres  (pour  l'unltd  inertielle) 

-  V  coaprls  entre  0,7  et  1,5  V0 

-  z  coapria  entre  1,2  et  1,6,  avec  une  veleur  probable  nutour  de  1,4  (ie  coOt  ent 
aultfplld  par  1,6  lorsque  le  volume  set  aultiplid  par  0,7). 

Encore  une  foie,  coa  conalddrat Iona  recouvrent  une  vartdtd  rip  technologies  diver- 
sea  at  leura  prlx  de  aarchd.  Dana  certains  css,  telte  technologic  aura  "du  me)  h 
euivre"  (per  exeaple  le  gyrolaser  pour  lea  felbles  volumen  et  lee  heutea  perforaenren ) , 
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FIGURE  4  -  SOLUTION  DE  REPLI  SORTANT  DU  CADRE 
D'UNE  NAVIGATION  AUTONOME 
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FIGURE  5  -  PERFORMANCES  POUVANT  ETRE  SATISFAITES 
SANS  CENTRALE  INERTIELLE 


FIGURE  6  -  PERFORMANCES  POUVANT  ETRE  ATTEINTES, 
SOU  EN  INERTIE  PURE,  SOIT  EN  INERT  IE  DEGRADCE  ATOEE 
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PERFORMANCE  SPECIFICATIONS 


BASIC  SOLUTION 
INERTIAL  NAVIGATION 


OTHER  SOLUTIONS 
AIDED  INERTIAL  NAVIGATION 
DEGRADED 

INERTIAL  +GPS,  OMEGA.  V  R-DME 
SYSTEM  TACAN,  DOPPLER  RADAR  etc 


REFERENCE  COST 


COMPARISON 

i 

CHOICE  OF  THE  OPTIMAL 
PERFO/COST  SOLUTION 

INERTIAL  SYSTEM  CLASSIFICAYlON  ACCORDING 
TO  PERFORMANCE 


Long-term  position 
occurocy 


Medium-term  position 
occurocy 

Short  term  position 
occurocy 

Instontoneous  ground 
velocity  occurecys— q 

Instontoneous  route 
occurocy 

Instantaneous  heodtng 
occurocy 

Instantaneous  ottKude 
occurocy 


0.1 -0.2 

3  200  600  180 

4  0.4  1.3  4 

5  107-0.:  0.2— 0.7  0.7- 

6  0.1  0.3  1 
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18000  j 
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dagrM 
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INERTIAL  NAVIGATION  SYSTEM  COST 
PERFORMANCE  EFFECT 


FORMULA  PROPOSED 

C/Co  -  [(Nm/ho)/(Nm/h)]  x 

-  (Nm/ho)  *=  3  Nm/h  =>  long  term  position  accuracy  of  the 

reference  system 

-  (Nm/h)  =  Long  term  position  accuracy  of  the  unknown  cost 

system 

-  Co  *=  Reference  system  cost 

-  C  =  Cost  of  the  considered  system 

—  X  m  Coefficient  0.30  <  X  <  0.35 


Interval  of  validity  0.30  $  (Nm/h)  ^  30 
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RELATIVE  COST  WITH  RESPECT  TO 
PERFORMANCE  CUSS 


PERFORMANCE  CLASS 

L* 

B 

C 

r^1 

E 

Nm/h 

a 

a 

II 

10 

30 

Cost  with  x  -  0.30 

1.99 

1.39 

a 

0 

Qjl 

Cost  with  x  «  0.33 

2.13 

1.44 

a 

0.67 

0.47 

Cost  with  x  -  0.38 

2.29 

1.48 

1 

0.65 

0.44 

INERTIAL  NAVIGATION  SYSTEM  COST 
EFFECT  OF  A  URGE  PRODUCTION 

FORMULA  PROPOSED  (WRIGHT  FORMULA) 

C/Co  =  (Qo/G)Y 

-  Co  «  Cost  for  the  quantity  Qo  (Qo  =  500) 

-  C  ■  Cost  for  the  quantity  Q 

-  Y  -  Coefficient  0.07  <  Y  <  0.24 

Interval  of  validity  5o  ^  Q  ^  5000 


INERTIAL  NAVIGATION  SYSTEM  COST 
EFFECT  OF  THE  VOLUME 

FORMULA  PROPOSED 

C/CO  -  (\'o/V)Z 

-  C  •>  Cost  for  the  volume  V 

—  Co  -  Cost  for  the  volume  Vo  (Vo  ■=  1 7  liters) 

-  Z  «  Coefficient  1.2  <  Z  <  1.6 

Interval  of  validity  12  I  ^  V  ^  26  I 


EXAMPLE  OF 

NAVIGATION  SYSTEM  FOR  HELICOPTER 
(HAP-PAH2  EUROPEAN  HELICOPTER) 


3  SOLUTIONS 

®  INERTIAL  SYSTEM  CLASS  B  (INm/h) 


(2)  INERTIAL  SYSTEM  CLASS  D  (or  E) 
+  Optical  Position  Updating 
+  Doppler  Rodar 


(D  INERTIAL  SYSTEM  CLASS  E 
+  GPS 


COMPARATIVE 

COST 

PROBLEM 


CB  " 


C8- 


? 

Cq=  0.7  Co  ^ 


Cp«  0.9  Co  £ 
? 


Optical  Position  Updating 
♦  Doppler  rodor  cost 
GPS  cost 
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NAVIGATION  -  ACCOUNTING  FOR  COST 


DERRICK  J  HAMLIN  BSc . ,  MSc 
GEC  Avionics  Limited 
Rochester,  Kent,  MEi  2XX.  UK 


SUMMARY 

The  ideal  navigation  system,  from  the  point  of  view  of  the  supplier,  is  a  saleable 
system.  From  the  user's  point  of  view,  the  ideal  navigation  system  would  support  the 
operational  functions  of  his  vehicle  with  perfect  precision  at  all  times.  That  the 
matching  of  these  aims  has  been  challenging  is  evidenced  by  the  staggering  array  of 
systems  which  have  been  marketed  for  the  purpose  since  the  1940's,  the  range  of 
principles  employed,  their  characteristics  and  their  costs. 

It  is  the  purpose  of  this  paper  to  survey  the  contending  technologies  for  the 
navigation  element  of  various  types  of  guidance  and  control  applications  and  to 
illustrate  the  practical  constraints  on  both  supplier  and  user  in  attaining  the  ideals. 

The  paper  provides  examples  from  both  civil  and  military  fields  which  are  relevant 
to  guidance  and  control,  where  improvements  in  cost  effectiveness  are  being  achieved. 

1  INTRODUCTION 

$100,000  for  a  single  electronic  unit  designed  merely  to  tell  you  where  you  are  may 
well  be  suprising  to  those  who  are  unfamiliar  with  the  use  of  Inertial  Navigation 
Systems;  the  admission  that  such  devices  are  expected  to  be  wrong  by  perhaps  5km  in 
normal  operation  is  usually  treated  with  disbelief;  and  the  realisation  that  many  civil 
aircraft  boast  three  each,  increases  the  mystery. 

At  the  heart  of  this  puzzle,  which  has  taxed  guidance  system  manufacturers  for  more 
than  thirty  years,  is  the  need  in  many  diverse  applications  for  autonomy  of  operation. 
Radio  navigation  receivers  are  far  more  cost  effective  by  comparison,  but  they  are 
dependent  on  external  influences  which  cannot  be  regarded  as  trustworthy  in  all 
circumstances. 

The  traditional  users  of  navigation  systems  -  ships  and  aircraft  -  have  generally 
been  content  to  suffer  the  cost  penalties  associated  with  their  purchases  provided  that 
the  units  function  reliably  and  reasonably  accurately. 

As  weapons  have  become  more  autonomous,  however,  these  too  have  begun  to  demand 
high  precision  over  long  operational  flight-times.  Unlike  aircraft  though,  where  the 
co3t  of  the  navigation  sensing  might  be  only  one  fiftieth  of  the  cost  of  the  air 
vehicle,  the  contribution  can  rise  to  one  fifth  in  the  case  of  missiles,  unmanned 
vehicles  and  land  vehicles  when  significant  periods  of  autonomous  operation  are 
required.  (Reference  1  and  2). 

Three  conflicting  demands  then  are  placed  on  the  navigation  system  architecture.  It 
must  operate  (everywhere  and  at  all  times)  with  high  precision,  require  no  external 
aids,  and  cost  a  relatively  insignificant  amount  compared  with  the  vehicle. 

The  diversity  of  customer  choice,  however,  sometimes  makes  selection  of  a  suitable 
device  an  onerous  task.  The  problems  are  no  less  for  the  guidance  system  supplier  who 
perpetually  strives  to  match  the  laws  of  physics  to  the  three  criteria  -  autonomy  of 
operation,  accuracy  and  cost. 

The  object  of  this  paper  is  to  give  some  of  the  reasons  for  the  conflict  between 
the3e  factors  and  to  show  the  broad  relationships  between  the  factors  for  some  of  the 
presently  available  systems. 

It  concentrates  on  the  position  determination  element  of  guidance  and  excludes 
consideration  of  target  seekers,  command  links,  and  flight  control.  It  also  attempts  to 
make  the  subject  more  manageable  by  avoiding  the  various  combinations  of  integrat'd 
system,  even  though  these  can  contribute  greatly  to  the  accuracy  and  robustness  of 
navigation  performance  in  some  applications. 

2  THE  NAVIGATION  REQUIREMENTS 

It  is  instructive,  first  of  all,  to  describe  the  navigation  function  which  i  ; 
separated  into  two  parts  for  this  purpose  -  an  active  part  and  a  passive  part.  The 
active  process,  that  of  locating  the  vehicle,  refers  to  setting  the  vehicle  in  position 
and  on  a  desired  track  at  a  particular  time.  It  is  closely  related  to  flight  guidance, 
energy  management,  minimum  flight  separation,  terrain  avoidance,  4-D  rendezvous  ml 
mission  management. 

The  panntve  proems,  that  of  I  oca  1  1  nn  t  Ion ,  refers  to  del'  cl  in  i  I  lie  position  "I  I  I" 
vehicle  at  a  given  time.  In  conjunction  with  accurate  night-  linen,  tad  to  communication', 
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and  perhaps  electro-optical  or  radar  sensors,  this  function  is  closely  related  to  target 
acquisition,  weapon  aiming,  gun-laying,  and  air  traffic  control,  for  example.  In 
addition,  in  many  cases  it  supplies  wind  vector  estimation,  vehicle  rotation  rates  and 
precise  attitude,  heading  and  velocities  from  the  same  system.  It  is  therefore  truly  a 
multifunction  facility,  which  accounts  for  its  potentially  high  value  in  supporting  the 
flight  and  mission  avionics  of  a  manned  aircraft,  but  it  also  accounts,  to  a  great 
extent,  for  its  relatively  high  cost. 

Of  primary  importance  to  the  overall  navigation  system  cost  is  the  accuracy 
required  by  the  user  and  this  is  naturally  dictated  by  his  application.  Over  a  wide 
range  of  applications,  performance  needs  may  be  anything  from  1  metre  at  one  end  to  10 
thousand  metres  at  the  other. 

An  accuracy  of  1  metre  is  required  for  surveys  and  one  system  can  be  lowered  6  km 
down  an  oil-well  drill  shaft  while  reading  out  three  dimensional  position  to  this 
accuracy.  Further  down  the  scale,  the  navigation  community  encompasses,  for  instance, 
the  road  navigation  of  public  service  vehicles,  ballistic  missile  guidance,  military 
vehicles,  submersibles  and  ships  -  essentially  in  a  decreasing  order  of  accuracy. 

The  lower  end  of  performance  is  adequate  for  long-range  civil  airliners  and,  by  way 
of  example,  for  interplanetary  missions.  (The  Pioneer  spacecraft  was  well  within  this 
accuracy  after  its  800  million  kilometer  leg  to  Jupiter.) 

Autonomy  is  the  the  next  cost  driver.  Does  the  system  have  to  operate  within  the 
specified  performance  limits  for  long  periods  without  help  or  can  its  errors  be 
corrected  occasionally?  Can  it  receive  reliable  radio  signals  or  is  it  underground, 
below  the  sea  surface  or  in  a  built-up  area?  More  particularly,  is  the  user  sensitive  to 
temporary  or  permanent  loss  of  external  radio  aids  as  in  the  case  of  pilots  of  long- 
range  civil  aircraft  or  battle-field  commanders? 

Not  surprisingly,  the  wishes  of  the  customer  are  reflected  in  the  price  he  pays; 
and  prices  range  over  more  than  two  orders  of  magnitude.  Even  the  lowest  cost  of  radio 
navigator  at  about  $2,000  is  expensive  for  some  users,  and  its  range  of  operation  quite 
limited.  At  the  other  end,  $500,000,  the  costs  reflect  more  the  desire  either  for 
accurate,  unaided  operation  over  periods  of  many  hours  or  for  extremely  high  accuracy 
over  much  shorter  periods.  Moreover,  these  costs  relate  to  discrete  equipments,  not 
necessarily  to  integrated  systems.  (In  this  document,  costs  have  been  normalised  to  1984 
U.S.  Dollars  using  an  approximate  annual  inflation  rate  of  7%  where  appropriate)  . 

3  THE  PRINCIPAL  SYSTEMS 

Trimming  back  the  number  of  navigation  technologies  to  a  manageable  selection  for 
this  analysis  is  probably  unjust  to  those  omitted  members  of  the  community  which  have 
perfectly  valid  application  in  certain  circumstances.  However,  the  following  list 
illustrates  the  major  contending  techniques  and  encompasses  the  general  principles  of 
all  the  others. 

RADIO  NAVIGATION  AIDS 

Short  Range  Navigation,  Area  Navigation 

Locan-C 

Omega 

GPS  Navstar 

AUTONOMOUS  NAVIGATION  SYSTEMS 
Inertial  (Platform) 

Inertial  (Strapdown) 

Doppler /Heading 

COMMUNITY  NAVIGATION  SYSTEMS 

A  broad  grouping  of  types  leads  to  a  distinction  between  non-autonomous  systems 
based  on  radio  transmission,  fully  self-contained  or  autonomous  systems,  and  systems 
based  on  data-links  which  either  remotely  measure  the  vehicle's  position  or  relate  each 
member  of  a  community  to  the  others.  Clearly,  the  last  mentioned  category  is  not 
autonomous  and  depends  on  the  maintenance  of  meaningful  transmissions  between  members. 
When  data-links  are  employed  for  navigation  it  is  generally  due  to  their  adoption  for 
quite  different  operational  reasons.  Nevertheless,  if  they  can  be  used,  a  marked 
reduction  in  vehicle  navigation  cost  is  possible.  Typical  examples  are  unmanned  target 
aircraft  and  remotely  piloted  vehicles  but,  as  far  as  the  general  user  is  concerned,  the 
restricted  line-of-sight  operational  radius  impairs  the  value  of  the  technique.  JT1DS, 
an  example  of  this  group,  is  primarily  a  communication  system  but  its  correlation 
processing  in  principle  permits  triangulation  among  its  users.  Accurately  computinu 
positional  information  from  the  ever-changing  gemometry  of  a  group  of  vehicles  present-, 
a  non-trivial  problem  however  and  maintenance  of  continuous,  reliable  communication  for 
this  purpose  makes  its  cost  effectiveness  questionable  if  used  purely  as  a  navigational 
aid  for  some  of  the  members  of  the  community. 

Concentrating  now  on  the  radio  navigation  aids,  in  Table  1,  VHF  area  navigation 
systems  have  been  selected  in  order  to  illustrate  the  cost  and  performance  of  short 
range  receivers  with  coverage  up  to  about  200  km  for  air  vehicles.  They  form  the  lowest 
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cost  navigation  systems  with  prices  ranging  from  $2,000  for  general  aviation  VOR 
receivers  alone,  to  $5,000  for  VOR/DME  fits  and  to  $25,000  for  the  most  sensitive 
VOR/DNE-based  full  area  navigation  systems.  (Reference  3).  In  addition  to  their  limited 
range,  however,  they  suffer  from  interference  and  anomolous  propagation  effects  causing 
errors  of  the  order  of  3  km  at  medium  ranges.  (Reference  4  and  5).  There  is  little 
chance  of  reducing  the  cost  or  the  errors  of  these  systems  because  they  are  produced  in 
relatively  small  quantities  -  being  restricted  in  application  largely  to  the  aviation 
world  -  and  they  are  essentially  'analogue'  in  nature  and  unable  to  benefit  from  the 
increasingly  advantageous  prices  of  digital  components. 

The  range  of  operation  of  Loran-C  is  far  more  attractive  and  can  extend  to  2000  km 
over  water  but  propagation  anomalies  cause  errors  to  increase  from  50  metres  for  pure 
ground-wave  propagation,  to  500  metres  or  more  when  corrupted  by  sky  waves.  Costs  for 
commercial  equipments  range  from  $1,000  to  $20,000  and  military  equipment  specification;; 
push  the  price  beyond  $30,000.  Here  again,  there  is  generally  little  attraction  in 
reducing  the  costs,  due  to  the  limited  appeal  of  a  relatively  local  aid,  although  the 
accuracy  in  good  conditions  is  valuable  for  some  applications  such  as  off-shore 
operations  and  a  $1000  unit  is  now  available  for  marine  use.  (Reference  6). 

Omega  is  a  significant  improvement  over  Loran-C  in  terms  of  uniform  global  coverage 
and  the  redundancy  inherent  in  the  multiple  Omega  and  VLF  transmitters  provides 
protection  for  the  user  against  spurious  functional  failure  in  individual  transmitters. 
Its  errors,  though,  are  much  greater  than  Loran-C  due  to  the  ionspheric,  wave-guide 
propagation  mode  on  which  Omega  depends.  The  best  modelling  available  for  the  systematic 
propagation  errors  results  in  errors  of  the  order  of  3  km  to  5  km  but  less  complete 
models  are  implemented  in  some  cases  and  higher  errors  are  possible  in  certain 
circumstances.  Multi-frequency  processing,  transmitter  selection  logic,  and  propagation 
modelling  have  made  heavy  demands  on  the  computer  architecture  in  the  past  but  this  has 
been  rectified  in  more  recent  designs  by  introducing  microprocessors  and  lower  cost 
store  technology.  Major  improvements  have  occured  in  the  size  and  cost  effectiveness  of 
Omega  receivers  and  the  facility  would  be  more  attractive  but  for  the  promises  of  the 
Global  Positioning  System  -  Navstar. 

Without  doubt,  the  prospect  of  automatic  position  determination  to  an  accuracy  of 
10  or  15  metres,  anywhere  on  the  surface  of  the  earth,  is  the  most  profound  development 
in  the  field  of  navigation  in  many  years.  (Reference  7  and  8).  That  this  can  be  achieved 
in  the  majority  of  applications  at  a  cost  to  the  user  comparable  with  the  far  less 
capable  conventional  long  and  short  range  radio  aids  has  to  be  regarded  as  a  useful 
contribution  to  the  cost  effectiveness  of  guidance  technology. 

The  user  equipment  costs  shown  in  Table  1  are  projections  from  earlier  programme 
cost  targets  but  these  are  now  gradually  being  vindicated.  As  the  production  quantities 
increase  it  is  probable  that  an  increased  dependence  on  VLSI  will  occur  and  cost  will  be 
reduced  accordingly.  This  is  due  to  the  largely  digital  nature  of  the  techniques 
involved  and  relative  ease  of  standardising  the  circuitry  in  silicon,  compared  with  the 
previous  systems.  At  the  more  expensive  military  end,  however,  the  price  of  the  system 
is  inflated  by  the  need  to  guard  the  overall  system  performance  by  careful  integration 
with  an  inertial  navigation  system.  A  further,  large  cost  increment  is  added  in  the  case 
of  high  performance  aircraft  due  to  the  need  for  controlled  receiver  beam-patterns  that 
demand  complex  antenna  installation  and  beam-forming  processes. 

These  aspects  draw  attention  again  to  the  critical  problem  of  user  autonomy.  The 
user  system  can  be  jammed  in  certain  limited  circumstances,  the  geographically  fixed 
ground  elements  can  be  destroyed,  and,  more  importantly,  the  satellites  in  principle  can 
be  disabled  or  simply  switched  off.  Potential  users  in  the  civil  aviation  field  are 
reluctant  to  trust  its  aid  if  it  can  be  instantly  removed  without  warning,  and  field 
commanders  are  suspicious  of  the  total  dependence  of  their  forces  on  a  single,  even 
slightly  weak  link.  On  the  other  hand.  Transit  has  been  in  faithful  service  to  both  the 
military  and  civil  worlds  for  many  years  and  it  clearly  illustrates  that  GPS,  with  its 
significantly  greater  capability,  will  be  even  more  widely  used  -  subject  to  the 
approval  of  the  tax-payers  of  the  United  States  of  America. 

Therein  lies  a  further  difficulty  for  non-American  users.  Installation  and  support 
costs  for  radio  navigation  aids  are  extremely  high  and  Table  2  lists  some  estimates  for 
these  costs  over  a  twenty  year  period  for  comparison  with  the  user  equipment  cost. 
(Reference  9).  For  the  purposes  of  illustration,  it  is  assumed  that  there  is  a  community 
of  50,000  users  on  the  North  Atlantic,  Eastern  Seaboard  Loran-C  chain.  The  twenty  year 
transmitter  non-recurring  and  support  costs  per  user  equipment  would  correspond  to  tie- 
equivalent  of  $7,000,  or  $350  per  year  for  each  user. 

For  Omega,  the  'hidden'  cost  would  be  $18,000  over  the  twenty  years  and  for  CPS  - 
Navstar  it  amounts  to  $130,000  per  user  assuming  50,000  global  users.  There  is,  a ' 
present,  no  Intention  of  charging  potential  users  for  their  use  of  these  systems. 

4  AUTONOMOUS  DEAD  RECXOMING  SYSTEMS 

In  the  case  of  velocity  vector  dead  reckoning  and  inertial  navigation  systems,  t],r> 
situation  is  quite  different.  Their  autonomy  and  freedom  from  interference  is  assur'd 
but,  for  the  user,  the  cost  of  good  performance  is  high. 
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The  two  practical  forms  of  velocity  vector  navigation,  shown  schematically  in 
Figure  1,  comprise  ai rdata-der ived  velocity  or  doppler  radar  coupled  with  a  compatible 
heading  source.  Airspeed  is  corrupted  by  the  errors  in  the  estimate  of  windspeed  while 
doppler  measures  true  groundspeed  and  has  a  velocity  accuracy  which  is  as  good  as  an 
aircraft  inertial  system.  The  primary  cost  limitation  to  both,  however,  is  the  heading 
measurement  required  to  resolve  the  groundspeed  vector  into  geographical  axes.  For 
complementary  performance  in  each  case,  the  heading  component  cost  is  greater  than  that 
of  the  velocity  sensor.  Note  that  there  is  a  single  integrator  in  each  channel  which 
transforms  North  and  East  velocities  into  position. 

Performance  of  the  airdata-based  system  is  sometimes  adequate  for  short  periods  of 
a  few  minutes,  and  it  makes  a  reasonable  supporter  for  Omega  and  the  short  range  radio 
aids.  In  addition,  cost,  including  a  gyromagnetic  heading  source  can  be  lower  than  the 
$3,000  given  in  Table  3  provided  that  the  navigator  or  pilot  is  interpreting  the 
information.  At  the  higher  cost  end,  the  navigation  function  is  generally  only  an 
adjunct  to  other  uses  of  high  quality  air  data  but,  in  either  case,  the  determination  of 
the  wind  vector  is  by  far  the  dominant  performance  factor. 

With  a  one  degree  gyromagnetic  heading  sensor,  a  doppler  solution  is  probably 
feasible  for  significantly  less  than  $35,000  but,  it  seems,  none  is  available  for  air- 
vehicles  requiring  a  general  navigation  capability. 

Hatching  the  attitude  and  heading  reference  system  performance  to  that  of  the 
doppler  causes  a  major  shift  in  cost  but  good  system  combinations  are  now  becoming 
available  with  more  successfully  harmonised  characteristics. 

5  IHUTIAL  SYSTEMS 

The  acceleration  vector,  or  inertial,  navigation  principle  may  be  represented 
generally  by  the  diagram  shown  in  Figure  2.  The  diagram  shows  across  the  centre,  the 
vehicle's  acceleration  measurements  being  corrected  and  resolved  into  earth's  axes 
before  being  integrated  to  give  velocity  and  then  position.  Earth-related-compensation 
terms  are  computed  from  the  inertial  system's  own  measurements  of  velocity  and  position 
in  order  to  take  into  account  movement  over  a  spherical,  rotating  earth.  Gravity 
compensation  removes  the  fixed  bias  in  the  vertical  direction. 

The  vehicle's  acceleration  vector  is  resolved  into  earth-related  axes  either  by 
ensuring  that  the  package  of  accelerometers,  which  forms  an  orthogonal  set,  remains 
stably  oriented  with  respect  to  the  earth's  surface,  or  the  accelerometer  directions  are 
followed  very  accurately  as  the  vehicle  manoeuvres.  The  first  approach  is  a  gimballed 
platform  and  this  ensures  that  the  sensitive  sensor  elements  are  isolated  from  the  worst 
effects  of  the  vehicle's  manoeuvres.  However,  the  cost  of  the  platform-supporting 
equipment  is  high  due  to  the  high  manufacturing  accuracies  required  and  the  difficulties 
of  achieving  high  reliability  of  electro-mechanical  components. 

The  second  approach,  the  strapdown  inertial  navigator,  deletes  the  gimbals  and 
their  attendant  problems  but  introduces  almost  impossible  challenges  for  the  design  of 
the  sensors,  particularly  the  gyros.  (Reference  10).  In  short,  it  turns  out  that  the 
resulting  strapdown  cost  for  an  aircraft  INS  is  very  similar  to  that  of  an  equivalent 
gimballed  version  but  the  equipment  reliability  can  be  improved  by  two  to  five  times 
with  corresponding  improvements  in  support  costs. 

The  two  integrators  are  clearly  fundamental  to  acceleration  vector  navigation  and 
they  likewise  have  a  fundamental  effect  on  system  performance.  In  the  first  place, 
advantageously,  they  attenuate  short  term  sensor  noise  and  produce  very  smooth 
measurements  of  position  in  comparison  with  doppler  which  uses  only  one  integrator.  The 
second  effect  of  the  integrators  is  highly  detrimental.  They  accentuate  sensor  bias  and 
drift  errors  as  the  square  and  cube-law  of  time  and  need  extremely  good,  expensive 
sensors  to  bound  the  position  errors  to  useable  levels. 

A  typical  system  drift  characteristic  for  gyro  erros  of  the  order  of  l°/hr  might  be 
represented  in  Figure  3  where,  over  1000  seconds,  the  position  error  follows  a  third 
order  law  to  about  8  kilometers.  Its  attraction  over  short  flight  intervals,  however,  is 
the  slow  start  to  the  third  order  error  characteristic. 

This  is  reflected  in  the  performance/cost  relationship  for  various  system  types 
given  in  Table  4,  (Reference  11)  with  short  range  missile  grades  providing,  in  the  main, 
flight  guidance  stabilisation  rather  than  true  navigation. 

Increasingly,  AHRS  units  are  being  configured  to  provide  navigation  outputs  as  well 
as  other  vehicle  parameters  and,  in  this  case,  the  drift  errors  tend  to  range  from 
30km/hr  to  500km/hr  when  used  in  isolation.  These  errors  may  seem  large  but  systems  of 
this  sort  are  usually  velocity-aided  with  airdata  or  doppler  information. 

At  the  more  accurate  end,  medium  and  high  grade  Inertial  navigation  systems  seem  to 
range  in  price  from  $80,000  or  $100,000  to  maybe  $500,000  but  the  values  in  this  car,, 
are  more  difficult  to  pin-down.  Aircraft  inertial  navigation  systems  have  ranged  in 
performance  from  about  0.4km/ht  to  lOkm/hr  but  in  the  main  lie  between  one  and  two  km/hr 
with  velocity  errors  of  the  order  of  0.5m/sec.  Ship  systems  are  more  massive  device-, 
with  more  accurate  sensors  that  require  a  benign  environment  for  ntable  performance. 
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A  breakdown  of  costs  as  shown  in  Table  5  for  a  typical  gimballed  INS  would  show  a 
dominant  contribution  from  the  sensor  cluster  and  gimbals.  The  computing  element  tends 
to  be  far  less  significant.  The  rest  of  the  components,  with  the  exception  of  the 
control  and  display  unit,  would  be  common  to  many  applications  and  these  rough 
proportions  would  probably  be  maintained  in  most  cases. 

t  EXAMPLES  OP  COST  REDUCING  METHODS 

Various  methods  of  cost  reduction  have  been  implemented  in  navigation  systems,  the 
most  successful  being  in  the  area  of  digital  techniques  and  in  the  adoption  of  large 
scale  integrated  circuitry.  Por  example,  one  approach  to  improved  doppler  design  has 
achieved  marked  reductions  in  doppler  sensing  costs  for  aircraft  by  means  of  simplified 
antenna  manufacture,  and  by  eliminating  microwave  and  frequency  tracker  hardware.  Figure 
4  illustrates  the  unit. 

More  dramatic  savings  can  be  made  in  limited  applications  by  precisely  matching  the 
capability  of  the  sensor  to  the  environment.  The  single  axis  doppler  shown  in  Figure  5 
costs  less  than  $1,000  to  manufacture. 

The  manufacturing  complexity  of  high  performance  strapdown  systems  is  still  a 
significant  impact  on  their  cost  but  units  of  the  types  shown  in  Figure  6,  employing 
Laser  gyros,  have  demonstrated  an  exceptional  reliability  in  operational  service  -  7000 
hrs  mean  time  between  failure  in  civil  aircraft  and  over  2000  hrs  in  high  performance 
military  aircraft.  These  results  were  achieved  immediately  on  introduction  into  service. 
The  maintenance  costs  are  also  reduced  by  a  factor  of  8  over  conventional  platform 
systems  due  to  elimination  of  periodic  calibration  and  clean-room  maintenance 
facilities,  reduced  spares  handling,  and  improved  self-monitoring. 

Encouraging  results  can  be  achieved  with  inertial  systems  by  simply  leaving  out 
some  of  the  sensors  as  in  the  land-vehicle  heading  reference  system  illustrated  in 
Figure  7  which  is  used  in  conjunction  with  an  odometer  (speed  measuring  equipment)  . 

CONCLUSION 


The  paper  attempts  to  relate  the  dominant  navigation  technologies  to  the 
performance  and  cost  pressures  experienced  by  users  and  suppliers.  Although  emphasising 
a  limited  range  of  techniques,  there  are  numerous  variations  on  each  and  there  are  many 
others  available  for  consideration  in  particular  applications. 

Some  broad  performance  and  cost  bounds  have  been  given  which  relate  to  the  most 
promising  and  widely  adopted  systems  and  examples  of  successful  improvements  in  the  cost 
effectiveness  of  specific  types  of  sensors  have  been  presented. 


\ 
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Nominal 

Accuracy 

Low  High 

Cost  Bracket  ($K) 

Low  High 

VOR/DME,  DME/DME 

3km  0.5km 

5  25 

LORAN-C 

500m  50m 

1  30 

OMEGA 

10km  3km 

20  60 

GPS-NAVSTAR 

150m  10m 

15  50 

Table  1  Radio  Navigation  Systems 


Non-Recurring 
Cost 
( $M ) 


Estimated  Support 
Cost  ( $M ) 

Over  20  Years 


LORAN-C 


OMEGA 


GPS-NAVSTAR 


Table  2  Non-Recurring  and  Support  Costs 


Nominal 

Accuracy 

(4  Distance  Gone) 

Low  High 

Cost  Bracket 
(SK) 

Low  High 

Air  Data,  Gy ronagnetic 
Heading,  Wind  Vector 

104  4% 

3  (25) 

Doppler/AHRS 

2%  0.34 

_ 

35  70 

Table  3  Dead  Reckoning  -  Velocity  Vector 


Nominal 

Accuracy 


Cost  Bracket 
<$K) 


Short  Range  Weapon  Grade 
(Agi le) 


Attitude  and  Heading 
Systems 


Inertial  Navigation 

Systems  I  lOkm/hr  0.4km/hr 


500km/hr  30km/hr 


Ships  Inertial  Systems 


Table  4  Inertia)  Navigation  Systems 
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Inertial  Measurement  Unit  45% 
Platform  Drive  Electronics  10% 
Central  Processor  15% 
System  Interfacing  15% 
Power  Conditioning  Unit  5% 
Control  and  Display  Unit  10% 


Table  5  Approximate  Cost  Contributions  in  a  Gimballed  INS 
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DESIGN  ADEQUACY:  AN  EFFECTIVENESS  FACTOR 

by 

Dr  A.R.Habayeb 
Naval  Air  Systems  Command 
Code  AIR-320H 
Washington  DC.  2036 1 .  USA 

The  fundamental  concept  of  system  effectiveness  underlies  the  decision  making 
process  of  many  people  throughout  history.  The  concept  of  system  effectiveness  will  be 
reviewed  and  examined  from  the  perspective  of  weapon  systems  consisting  of  launch 
platforms,  targeting  avionics,  weapons,  and  targets.  The  tie-in  between  the  various 
elements  of  a  weapon  system  will  be  discussed.  System  effectiveness  methodology 
provides  insights  into  the  design,  development,  utilization  and  tradeoff  evaluation  of 
diverse  types  of  systems.  Because  of  the  multiplicity  and  uncertainty  of  the  variables 
involved,  the  system  effectiveness  framework  used  in  this  paper  is  probabilistic.  The 
application  of  system  effectiveness  to  hardware  systems  is  based  on  three  effectiveness 
factors:  (1)  reliability  (dependability),  (2)  readiness  (availability),  and  (3)  design 
adequacy  (capability) .  The  paper  deals  with  design  adequacy  as  a  key  system 
effectiveness  factor.  Design  adequacy  is  a  measure  of  how  well  a  system  performs  its 
functions.  It  is  the  most  desired  factor  in  the  definition,  design,  and  early  stages 
of  system  development.  The  paper  presents  a  design  adequacy  quantification  methodology 
and  shows  the  relationship  between  design  limitation  and  adequacy.  The  design  adequacy 
methodology  is  based  on  the  measures  of  adequacy,  system  parameters,  subsystem 
parameters  and  the  employment  phases  of  the  system.  In  a  weapon  system  context,  the 
performance  parameters  of  a  guidance  and  control  subsystem,  are  interdependent  with  the 
parameters  of  the  remaining  subsystems.  The  paper  deals  with  three  employment  phases 
of  a  weapon  system.  The  three  phases  are:  (1)  prelaunch  phase,  (2)  free  flight  phase, 
and  (3)  end-game  phase.  Examples  based  on  air-to-air  missiles  are  given  to  illustrate 
these  relationships  and  concepts. 


1 . 0  Introduction 


New  and  emergent  systems,  like  at  no  time  before,  must  be  responsive  to  increased 
demands  for:  more  and  better  performance;  lower  life  cycle  cost;  longer  operating 
life;  more  productivity;  and  real  improvements  and  attendant  greater  efficiency,  in  the 
planning  and  allocation  of  fiscal  resources.  System  effectiveness  analyses,  conducted 
as  early  as  possible,  and  continued  throughout  a  system's  lifetime,  are  a  sound  means 
of  achieving  this  goal.  In  the  early  design,  research,  development,  test  and 
evaluation  period,  system  effectiveness  analysis  will  provide  the  needed  tradeoff 
analyses  of  alternatives  and  options,  and  methodologies  for  achieving  objectives  and 
goals,  and  approaches  for  decision  and  choice  making.  This  also  provides  needed 
insight  into  the  dynamics  and  critical  design  parameters  so  important  in  the  assessment 
of  Design  Adequacy,  the  primary  factor  in  performance  achievement. 

In  recent  times,  the  design  and  development  of  systems  have  become  more  complex 
and  have  increased  the  need  for  systematic  techniques,  principles,  and  quantification 
methodologies.  System  designers  have  been  faced  simultaneously  with  demands  to  lower 
the  cost  and  increase  the  performance  under  challenging  conditions.  The  outcome  of 
these  demands  is  a  tradeoff  between  performance  and  cost.  Performance  requirements 
invariably  include  severe  reaction  and  response  time  constraints  which  cannot  be  met 
without  the  proper  integration  and  resource  allocation  of  personnel,  intelligence, 
hardware  and  procedures.  At  the  same  time  system  development  cost  reductions:, 
accelerated  schedules,  and  lack  of  complete  system  tests  prior  to  operational  usage 
have  combined  to  reduce  the  presence  of  adequate  operational  data  banks,  either  in 
quality  or  quantity.  Accordingly,  it  is  necessary  to  have  a  comprehensive  methodology 
of  system  analysis  utilizing  all  available  information  both  to  pinpoint  problem  areas 
and  to  provide  a  numerical  estimate  of  system  effectiveness.  The  purpose  of  this  paper 
is  to  put  into  perspective  all  the  factors  which  must  be  considered  in  measuring  the 
effectiveness  of  hardware  systems,  and  to  investigate  the  particularly  important  factor 
of  Design  Adequacy. 

2.0  System  Effectiveness  Framework 

Effectiveness  is  a  desired  outcome,  state,  consequence,  or  operation. 
Effectiveness  is  doing  the  right  things  right,  to  achieve  the  objective.  System 
effectiveness  is  a  measure  of  the  extent  to  which  a  nyntem  can  bo  expected  to  achieve  a 
set  of  specific  goals.  It  can  also  be  thought  of  mi  the  probability,  Pae,  that  the 
system  will  achieve  its  objective.  System  effectiveness  is  an  interdisciplinary 
subject  which  is  based  on  probability,  set  theory,  logic  and  uses  the  tools  of  system 
engineering,  analysis  and  synthesis. 

In  general,  hardware  systems  are  designed  and  developed  to  meet  specific 
objectives  and  goals;  therefore,  one  needs  tools  and  methods  to  determine  how  well  they 
can  achieve  these  objectives  and  goals.  The  need  for  methods  to  measure  the 
achievement  of  design  objectives  Invariably  lends  one  in  n  concept  of  nyniem 
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•£ fectiveness  and  limitation.  An  accountable  system  effectiveness  analysis  is  the  most 
appropriate  method  for  tradeoff  analyses  of  alternatives,  comparing  evolutionary 
product  improvement  of  existing  systems  to  new  optimized  systems,  evaluating  the 
operational  utility  of  competing  options,  and  for  the  assessment  of  technology  impact 
on  systems.  It  further  provides  an  analytical  means  for  determining  the  viability  of 
how  often  and  how  far  one  should  pursue  product  improvement  or  incremental  changes. 
The  system  effectiveness  accountable  factors  are  those  which  have  significant  influence 
on  the  desired  outcome.  For  a  hardware  system,  these  factors  are,  performance, 
availability,  modes  of  operation,  organization,  safety,  survivability,  environment, 
maintenance,  repair,  efficiency,  compatibility  and  the  like.  Each  factor  in  turn  is 
dependent  on  a  set  of  parameters  such  as  performance  parameters,  parts  count,  failure 
rate,  environmental  conditions,  real  estate,  down  time,  operating  time,  and  similar 
variables. 

System  effectiveness  deals  with  the  behavior  of  the  system  throughout  its  life 
cycle.  The  quantification  of  system  effectiveness  must  account  for  system  limitations 
due  to  degradation  in  system  readiness,  physical  failures,  and  design  limitation.  It 
follows  that  system  effectiveness  is  a  function  of  readiness,  reliability  and  design 
adequacy  (performance) .  A  framework  for  system  effectiveness  can  be  based  on  the 
probabilistic  notion  of  these  three  factors,  and 

pse  ”  Psr  Pr  pda  (U 

where,  P8e  is  the  probability  that  the  system  is  effective.  Psr  (system  readiness)  is 
the  probability  that  the  total  system  is  operating,  or  ready  to  be  operated 
satisfactorily.  System  readiness  is  a  measure  of  the  system  support  functions,  e.g., 
maintenance,  repair,  and  logistic.  Readiness  is  the  state  of  operability  of  the  system 
given  it  is  available.  Pr  (reliability)  is  the  probability  that  the  system  will 
operate  under  stated  conditions  without  malfunction  for  the  duration  of  the  mission;  it 
is  the  mission  reliability  of  the  system.  Pda  (design  adequacy)  is  the  probability 
that  the  system  will  successfully  accomplish  its  function  given  that  it  is  operated 
within  design  specifications.  It  is  the  measure  for  performance  capability.  It 
reflects  the  degree  of  correspondence  between  specified  performance  and  the  capability 
actually  demanded  by  the  operational  environment.  The  use  of  a  system  outside  its 
design  specification  results  in  a  limitation  which  reflects  design  inadequacy. 

The  system  effectiveness  factors  in  equation  (1)  are  related  to  the  factors  used 
by  the  Task  Group  II  of  the  Weapon  System  Effectiveness  Industry  Advisory  Committee 
(HSEIAC) .  In  the  final  report  of  January  1965,  the  Task  Group  II  adopted  the  framework 
for  system  effectiveness  evaluation  based  on  three  factors:  (1)  availability,  (2) 
dependability  and  (3)  capability. 

The  HSEIAC  model  is  based  on  an  enumeration  of  the  significant  system  states  over 
the  entire  mission.  System  states  are  discernible  conditions  of  the  system  which 
result  from  events  occurring  prior  to  and  during  the  mission.  For  example,  the 
condition  in  which  the  system  is  available  and  operable  is  one  state.  The  condition  in 
which  the  system  is  completely  or  partially  inoperable  due  to  hardware,  personnel,  or 
procedure  is  another  state.  A  system  can  transition  from  state  to  state  during  a 
mission.  The  structure  of  the  model  consists  of  three  distinct  parts,  an  availability 
row  matrix  (a),  a  dependability  square  matrix  |d],  and  a  capability  column  matrix  {c|. 
It  follows  that  system  effectiveness  (e)  is 
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This  model  gives  system  effectiveness  as  a  matrix  of  specified  figures  of  merit  or 
measures-of-ef fectiveness  (MOE) .  The  array  of  state  probabilities  at  the  beginning  of 
a  mission  gives  the  availability  matrix. 

If  the  system  has  only  two  possible  states:  (1)  operative,  or  (2)  not  operative 

(in  repair);  then  the  availability  matrix  “A*  consists  of  two  elements  aj  and  a2, 

A  -  (*x  a2)  <3> 

where,  *i  is  the  probability  that  the  system  is  operable  at  a  random  point  in  time.  a2 
is  the  probability  that  the  system  is  in  repair  at  a  random  point  in  time.  The 
probability  that  the  system  is  in  the  first  state  is. 


a  Hean-tlme-between  failure 


I"-™*!  .  Pnr 


MTBP  ♦  Hean-tlme-to-repalr  (HTTR) 

The  probability  that  the  system  is  unavailable,  i.e.,  it  is  in  the  Gerund  state  is, 
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If  the  system  Is  available  and  there  is  no  repair  during  the  mission,  then  both  models 
equation  (1)  and  (2)  are  equivalent.  Under  this  condition,  pSr  is  the  single  shot 
probability  of  success  and  pBr  *  aj.  Since  the  system  is  available  and  repair  is  not 
possible  during  the  mission,  the  dependability  matrix  reduces  to  one  element,  dn, 
where  dn  is  the  probability  that  the  system  is  operable  at  the  end  of  the  mission, 
given  that  is  was  operable  at  the  start  of  the  mission,  which  is  equal  to  the  mission 
reliability,  pr.  Similarly,  the  capability  matrix  contains  one  element,  cj_  »  Pda* 

2.1  Measures-of-Ef fectiveness  (MOEs) 

A  measure-of-ef fectiveness  (MOE)  is  any  index  which  indicates  the  quality  of  a 
system.  In  the  simplest  case  it  may  be  a  measured  physical  quantity,  such  as  velocity, 
range,  payload  of  an  aircraft,  or  the  number  of  targets  that  can  be  tracked  by  a 
sensor.  On  the  other  hand,  it  may  be  a  calculated  quantity  based  on  measurement,  such 
as  mean  down  time,  or  mean-time-to-repair  (MTTR) .  Also  it  can  be  a  predicted  quantity 
based  on  measurement  and/or  simulation.  For  example,  the  probability  that  a  system 
will  survive  an  attack  will  require  prediction  because  there  will  be  some  uncertainty 
about  the  attack  condition  and  environment.  HOE's  serve  to  indicate  what  can  be 
expected  from  the  system;  they  must  be  in  an  operationally  oriented  form  that  can  be 
readily  understood  and  used.  They  should  reflect  the  essence  of  the  system;  i.e.,  the 
reason  behind  its  existence. 

System  effectiveness  is  the  term  often  used  to  describe  the  overall  capability  of 
a  system  to  accomplish  its  mission.  For  a  missile,  system  effectiveness  is  the 
probability  that  the  missile  will  kill  the  target  when  called  upon  to  do  so  under 
specified  conditions.  Therefore,  the  single  shot  kill  probability,  pk8S  is  the  missile 
system  effectiveness,  pse  »  p^ss-  By  this  definition,  the  missile  fails  (i.e.,  does 
not  kill)  (1)  if  it  is  unavailable  or  inoperable  when  needed  or,  (2)  if  it  is  operable 
when  needed  but  fails  to  kill.  The  first  case  accounts  for  system  physical  failure  and 
degradation  in  readiness.  The  second  case  accounts  for  design  limitation  of  the  weapon 
system.  The  phrase  specified  conditions  implies  that  system  effectiveness  must  be 
defined  in  terms  of  the  requirements  placed  upon  the  system,  indicating  that  failure  to 
kill  and  conditions  of  use  are  related. 

2.2  System  Partitioning  and  Hierarchy 

The  process  of  advancing  from  a  coarse  analysis  to  a  fine  analysis  of  a  set  of 
logical  possibilities  is  achieved  by  means  of  partitioning.  similarly,  the  process  of 
determining  what  should  be  in  a  subsystem,  in  an  electronic  package  or  on  a  solid  state 
wafer  is  a  partitioning  problem.  The  objective  of  system  partitioning  is  to  optimize 
functional  and  structural  Interaction  of  the  Bystem's  building  blocks  'with  respect  to 
design  objectives.  A  given  system  can  be  partitioned  into  different  functional  levels 
according  to  topology  or  function,  or  both.  The  selected  partitioning  levels  are  based 
on  complexity  of  function  and  structure.  The  following  complexity  levels  are 
considered  here:  systems,  subsystem,  functional  block,  function  block,  circuit,  and 

element,  as  shown  in  Figure  1. 

The  vertical  structure  of  the  hierarchy  consists  of  a  multiplicity  of 
substructures  nested  within  the  system.  The  horizontal  structure  of  the  hierarchy  is 
characterized  by  mutual  support,  interaction,  or  interdependence  among  the  elements  at 
each  level.  Achievement  of  higher  level  objectives  depends  upon  the  functioning  of  the 
lower  level  structures.  At  each  level  in  the  hierarchy,  system  functions  are  dependent 
on  subordinate  functions.  The  relationship  between  functions  is  a  chain  interaction 
whereby  changes  in  system  functions  at  one  level  will  impact  functions  at  other  levels. 
The  higher  the  functions  in  the  hierarchy,  the  more  inclusive  they  are.  That  is, 
system  functions  at  one  level  account  for  a  multiplicity  of  other  functions  in  the 
lower  levels.  Consequently,  there  is  a  hierarchy  of  MOE's. 

System 

Second-Level  Partition: 

Functional  Block 

Third-Level  Partition: 

Functional  Blocks 

Fourth-Level  Partition: 

Function  Blocks 

Fifth-Level  Partition: 

Circuits 

Sixth-Level  Partition: 

Elements 

Figure  1.  Partitioning  Levoln  of  n  llnr.iw.iii>  System 
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Coabat  effectiveness  is  the  term  often  used  to  describe  the  overall  capability  of 
a  force  to  accoaplish  its  objective.  Proa  a  system  analysis  point  of  view,  a  hierarchy 
of  coabat  exists  with  vertical  and  horizontal  structure  as  shown  in  Figure  2.  The 
upper  levels  (1,  2,  3,  and  4)  represent  operational  coabat,  and  the  lower  levels  (5,  6, 
and  7)  represent  system  and  technology. 

In  this  paper  the  NOEs  of  the  different  levels  in  the  hierarchy  of  combat  are: 


Level 

1.  Nar 

2.  Nar fare  Mission  Type 

3.  Battle 

4.  Duel 

5.  Weapon  system 

6.  Subsystem 

7.  Technology 


MOE 

Resources  depletion  rate 

Drawdown 

Kill  rate 

Exchange  ratio 

Single-shot-kill 

Figure  of  merit 

Figure  of  goodness 


THE  HIERARCY  OF  COMBAT 
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WEAPON  SYSTEM 


LAND 


STRIKE 
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THIRD  LEVEL 


air-to-air 
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RANGE 


LONG 

RANGE 


FOURTH  LEVEL 


FIFTH  LEVEL 
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FILQT 


UZE  WArKe 


I 

ASICR  AFT 

-wimm 

PUL 


MISSS.E 


fuze  warhead  propulsion  airframe  control 


GUN 


SIXTH  LEVEL 


SEEKER 


MW 


ILOBT  J 


TECHNOLOGT  I  SEVENTH  LEVEL 


IR  EO 


Figure  2.  Structure  Of  The  Hierarchy  Of  Combat 

The  weapon  system  level  is  the  link  between  the  upper  and  lower  levels.  Its 
effectiveness  measure  is  the  single-shot-kill  probability,  P|<ss.  The  duel  level  deals 
with  the  relationship  between  the  parameters  at  the  operational  and  system  levels,  and 
.'ts  MOE  is  the  exchange  ratio.  At  the  subsystem  level,  MOEs  are  generic  performance 
outputs  of  more  than  one  technology,  such  as  miss  distance,  off-axis  angle,  kinematics, 
range  capability,  and  lethality.  They  are  referred  to  as  figures  of  merit  (FOMs) ,  or 
measures  of  performance  (MOPs) .  For  example,  FOMs  for  an  electro-optical  (EO)  seeker 
are  tracking  rate,  aspect  capability,  and  minimum  resolvable  temperature  (MRT) ,  which 
accounts  for  the  sensitivity,  resolution,  signal  to  noise  ratio,  the  modulation 
transfer  function  (MTF) ,  and  the  field  of  view  (FOV)  of  the  various  building  blocks  of 
the  seeker. 


The  initial  step  in  analyzing  combat  effectiveness  is  to  determine  the  level  for 
which  effectiveness  is  required.  Under  some  circumstances  it  may  be  necessary  to 
quantify  effectiveness  at  lower  levels  in  order  to  establish  the  impact  on  higher 
levels.  For  example,  the  impact  of  advanced  technology  on  the  operational  combat 
levels  cannot  be  quantified  directly.  One  needs  a  middle  ground  to  provide  continuity 
in  the  evaluation,  e.g.,  the  weapon  system  level.  Improvement  in  effectiveness  at  the 
weapon  system  level,  i.e.,  Pfcssi  is  then  projected  into  the  next  higher  level,  i.e., 
exchange  ratio. 

3.0  Effectiveness  and  Limitation 

A  system  attains  its  objectives  not  through  a  single  operational  action,  but 
rather  through  a  series  of  fundamentally  different  ones.  Therefore,  system  objectives 
are  attained  through  an  integrated  series  of  individual  or  combination  of  events,  and 
it  makes  no  difference  whether  all  these  actions  are  performed  by  one  building  block. 
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different  subsystems  or  groups  of  thea.  Prlaary  interest  lies  in  deteraining  what 
these  events  consist  of,  when,  and  why  they  occur.  An  event  is  defined  in  terms  of 
subset  and  saaple  space  of  an  experiment,  system,  or  organization.  A  sample  space  of  a 
systea  is  a  complete  set  of  alamanta  such  that  any  state  of  the  system  corresponds  to 
exactly  one  subset  or  element  in  the  set.  In  this  context,  the  elements  of  the  sample 
space  of  a  system  are  the  binary  combinations  of  the  events  associated  with  its 
functions.  For  example,  if  the  functions  of  a  system  are  a,  b,  c,  then  the  system 
sample  space  consists  of  2^  ■  8  elements.  The  elements  are  the  binary  combinations  of 
the  events  associated  with  the  functions,  e.g.,  AB,  AC,  BC,  ABC. 

System  effectiveness  may  be  made  tractable  by  the  application  of  system 
limitation.  This  is  represented  by  the  set  of  events  for  which  the  desired  outcome  is 
not  achieved.  Probabilistically,  limitation  events  are  the  complement  of  effectiveness 
events.  Equation  (6)  gives  the  relationship  between  system  effectiveness,  limitation, 
and  the  three  effectiveness  factors) 

pse  *  pacp6apt  *  1  ■  pal  (6) 
where,  Pai  «  system  limitation. 

The  relationship  between  system  effectiveness  and  limitation  is  illustrated  in  the 
system  space  diagram.  Figure  3,  where  the  rectangle  represents  the  total  system  space. 
This  is  the  set  of  events  associated  with  the  system  outcomes.  It  includes 
effectiveness  and  limitation  events.  In  this  diagram,  a  point  in  the  rectangle 
represents  a  possible  system  situation  resulting  from  a  possible  trial.  The  limitation 
region  in  Figure  3  accounts  for  all  the  causes  of  system  limitation.  Sometimes  in 
the  conceptual  phase  of  system  development,  it  is  easier  to  identify  limitation  than 
effectiveness.  That  is,  determining  what  the  system  cannot  do  is  easier  than 
determining  what  it  can  do.  It  should  be  observed  that  due  to  multiplicity  and 
uncertainty  of  the  variables,  system  effectiveness  is  neither  absolute  nor 
deterministic,  i.e.,  it  cannot  be  swasured  exactly  by  an  instrument,  but  it  is  rather  a 
probabilistic  concept  and  it  should  be  so  treated. 


Figure  3.  System  Space  Relating  System  Limitation  and  Effectiveness 

Probabilities  are  defined  in  terms  of  events.  It  follows  that  the  analytical 
framework  of  system  effectiveness  can  be  represented  in  terms  of  the  events  of  the 
three  effectiveness  factors  as  shown  in  the  Euler  diagram  of  Figure  4.  In  the  diagram, 
the  limitation  regions  are  labeled  unreadiness  (unavailability) ,  Inadequacy 
(incapability),  and  unreliability  (undependability).  Total  system  limitation  is 
represented  by  the  Venn  diagram  in  Figure  4,  which  is  the  area  bounded  by  the 
limitation  regions.  System  effectiveness  is  the  region  of  the  rectangle  which  is 
outside  the  Venn  diagram.  Figure  5  is  another  representation  of  system  effectiveness 
and  limitation,  it  is  the  complement  of  Figure  4,  where  system  effectiveness  is  the 
inner  region  of  the  Venn  diagram,  and  system  limitation  is  the  remaining  part  of  the 
rectangle.  The  Euler  diagrams  of  Figure  4  and  S  show  that  the  limitation  and 
effectiveness  events  overlap  each  other.  Both  diagrams  show  eight  disjoint  regions, 
seven  of  them  represent  limitation  events  and  one  represents  effectiveness.  The 
limitation  regions  in  Figure  4  are  not  mutually  exclusive  and  therefore  the  limitation 
events  of  unreadiness,  inadequacy  and  unreliability  may  or  may  not  be  statistically 
independent.  Therefore,  the  effectiveness  factors  are  interdependent  operationally, 
and  system  effectiveness  requires  they  occur  simultaneously. 


Figure  4.  Events  Diagram  Of  System  Elfectivenens  And  Limitation 
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Figure  S.  Events  Diagram  Of  System  Limitation  And  Effectiveness 


If  the  events  in  Figure  4  and  5  are  not  statistically  independent,  then  the  the 
probability  Psc,  P<ja ,  and  Pc  are  conditional  probabilities.  From  an  operational  point 
of  view,  readiness  or  availability  events  aust  occur  first,  i.e.,  the  system  must  be 
ready  or  available  at  the  time  of  aission.  Therefore,  availability  events  are  not 
conditional  on  the  reliability  or  design  adequacy  events. 

Inadequacy,  unreliability  and  unreadiness  events  are  random  in  nature  and 
sequential  conditioning  is  not  a  reasonable  representation  of  their  occurrence.  For 
example,  unreliability  events  may  occur  during  testing,  storage,  transportation,  or 
captive  carry,  and  if  undetected  it  will  influence  the  new  state  of  design  adequacy. 
On  the  other  hand,  design  inadequacy  can  be  the  state  of  the  system  before  its 
application.  Consequently,  Inadequacy  events  had  occurred  prior  to  system  employment 
regardless  of  reliability  and  readiness.  Design  adequacy  is  built  into  the  system  a 
priori  and  is  fixed;  what  changes  in  the  adequacy  perspective  is  the  environment,  e.g., 
new  applications,  conditions,  or  threat.  Similarly,  reliability  is  built  in  the  system 
at  the  time  of  putting  it  together.  Degradation  in  reliability  is  a  function  of  time 
and  the  environment.  Readiness  represents  procedural,  e.g.,  repair,  maintenance  and 
operational,  e.g.,  logistic,  training,  and  captive  carry  events. 

Quantification  of  the  system  effectiveness  factors  is  done  in  steps  at  different 
times.  Design  adequacy  is  evaluated  in  the  early  stages  of  system  design  and 
development  where,  readiness  and  reliability  data  are  not  available.  It  is  determined 
from  performance  analysis  by  simulation  or  experimentally.  Consequently,  design 
adequacy  is  quantified  by  assuming  that  readiness  and  reliability  events  had  occurred 
as  specified.  Reliability  is  assessed  from  the  block  diagram  of  the  system,  and  using 
parts  count  and  failure  rate  of  the  hardware.  Reliability  calculation  assumes  that  the 
performance  and  readiness  are  as  specified.  On  the  other  hand  readiness  is  estimated 
from  the  reliability  assessment,  and  the  mean-time-to-repair  (MTTR) .  The  estimation 
assumes  that  the  system  will  operate  within  its  design  limits.  Some  aspects  of 
reliability,  (e.g.,  redundancy,  hardware  quality  and  testing)  or  readiness  (e.g., 
modular  design,  and  human  factors)  can  be  accounted  for  in  the  early  stages  of 
developing  design  adequacy.  It  follows  that,  system  effectiveness  quantification  is  an 
interative  process.  After  the  system  has  been  operational,  feedback  can  be  used  to 
update  the  quantification  of  design  adequacy,  reliability  and  readiness.  In  general, 
the  three  effectiveness  factors  are  quantified  separately  from  each  others. 
Accordingly  it  is  reasonable  to  assume  that  the  effectiveness  events  are  statistically 
independent. 

4.0  Design  Adequacy: 

Design  adequacy  is  an  indicator  of  how  well  a  system  performs.  It  is  a  measure  of 
the  capability  of  a  system  to  perform  satisfactorily  in  its  operational  environment. 
System  design  adequacy  is  the  probability  that  a  system  will  successfully  accomplish 
its  function,  given  that  is  is  ready  and  reliable.  This  probablility  is  a  function  of 
such  variables  as  the  operational  environment,  system  accuracy,  design  limits, 
Interaction  and  organization  of  its  subsystems,  system  Inputs,  and  the  influence  of  the 
operator.  System  design  inadequacy  accounts  for  the  usage  of  a  system  beyond  its 
design  capabilities,  even  though  the  reliability  and  system  readiness  may  approach 
ideal  values.  For  example,  the  ineffectiveness  of  a  missile  designed  to  engage 
subsonic  targets  when  used  against  supersonic  targets  is  due  to  design  inadequacy  even 
if  P[*P([*1.0.  Design  adequacy  reflects  the  degree  of  correspondence  between  specified 
performance  and  the  system  capability  demanded  by  the  operational  environment. 

Simulation,  experimentation,  and  systea  analysis  provide  the  tools  of  quantifying 
design  adequacy.  The  design  adequacy  of  a  system,  Pja,  can  lie  estimated  from  knowledge 
of  the  system  performance  when  it  is  opereted  within  specification,  and  from  knowledge 
of  the  performance  required  to  achieve  success  In  the  mission  tor  which  effectiveness 
is  being  evaluated.  To  clarify  this  statement,  consider  an  airborne  communication 
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system  with  a  mission  duration  of  5  hours.  Further,  consider  that  on  the  average 
during  10%  of  the  mission  tine,  the  aircraft  will  be  called  upon  to  operate  at  a  range 
beyond  the  perforaance  capabilities  of  the  system,  even  though  the  coaaunication  system 
operates  at  optiaua  perforaance  level,  i.e.,  within  design  specifications.  In  this 
example,  P<ja  -  .9,  which  implies  that  the  system  is  adequate  for  the  aission  only  90% 
of  the  time.  Assume  that  the  reliability  of  the  system,  Pc  •  .95  and  that  the  system 
will  operate  within  specification  for  a  period  of  5  hours.  Furthermore,  an  estimate  of 
system  readiness.  Pgr,  based  on  operating  time,  down  time,  free  time,  and  available 
spares  shows  this  probability  to  be  94%.  Therefore, 

Pse  »  (.95)  (.9)  (.94)  -  .8037 

If  the  hardware  reliability  were  improved  so  that  Pc  ■  .999,  and  system  readiness  were 
Psr  ■  .97,  then 

Pse  -  (.999)  (.9)  (.97)  -  .87 

Similarly,  for  an  air-to-air  missile,  if  for  the  majority  of  combat  encounters  the 
missile  does  not  intercept  the  target  on  the  average  10%  of  the  time  due  to  target 
maneuverability ,  then  the  design  adequacy  of  the  missile  is  P,ja  =  .9. 

4.1  System  Design  Adequacy  Model 

The  quantification  of  system  design  adequacy.  Pda*  is  a  difficult  and  complex 
system  problem.  This  is  because  the  design  capability  of  a  system  is  dependent  on  the 
performance  of  its  subsystems,  and  the  operational  environment.  Therefore,  the  system 
performance  parameters  are  operationally  dependent  on  the  subsystem  design  parameters. 
Consequently,  the  quantification  of  system  design  adequacy  requires  the  determination 
of  the  statistical  and  the  functional  relationships  between  the  parameters.  For 
example,  the  range  capability  of  a  missile  as  a  system  parameter  depends  functionally 
on  the  propulsion,  airframe,  and  the  seeker  subsystem  design  parameters.  Similarly, 
the  range  capability  of  a  radar  as  a  system  parameter  depends  operationally  on  the 
antenna,  transmitter,  receiver,  and  the  display  subsystem  design  parameters. 
Accordingly,  the  system  design  limitation  due  to  one  system  parameter  is  influenced  by 
other  system  parameters.  An  approach  to  render  tractability  to  design  adequacy  is  the 
application  of  system  design  limitation  P^l,  where, 

*41  -  1  *  pda  (7) 

Equation  (7)  defines  the  events  of  design  limitation  as  complementary  to  the  events  of 
design  adequacy.  The  quantification  of  the  design  limitation  requires  the 
identification  of  the  factors  which  affect  the  accomplishment  of  the  mission.  The  next 
step  in  the  process  is  the  determination  of  the  functional  and  the  statistical 
relationship  between  the  system  parameters.  That  is  -  determine  if  parameter  "a"  is 
dependent  functionally  and  statistically  on  parameters  "b”  but  is,  independent  of 
parameter  "c*. 

Consider  system  (S)  with  two  system  parameters  "a"  and  ”b";  let  "A“  and  "B“  be  the 
design  limitation  events  associated  with  the  parameters  *a,“  and  "b"  respectively.  The 
system  parameters  are  interdependent  and  their  influences  on  the  design  limitation  of 
the  system  are  not  mutually  exclusive.  That  is,  system  design  limitation  due  to  ‘A" 
will  partially  occur  during  design  limitation  due  to  B.  The  example  is  illustrated  by 
the  Euler  diagram  of  Figure  6. 


Figure  i.  Euler  Diagram  Of  Two  Not  Huiunlly  i:xol im t vi>  Syutem  Events 


J3  JidXJ  INiJWNMJAOU  IV  (IJjni|i»i.i  Hi 


4-8 


The  rectangle  of  Figure  6  represents  the  total  system  design  space  i.e.,  design 
adequacy  and  design  limitation.  In  the  diagram  the  system  design  limitation  events  are 
represented  by  the  two  overlapping  circles,  where  R  is  the  complement  of  A.  The  system 
design  adequacy  is  defined  by  the  region  of  the  rectangle  which  is  outside  the  Venn 
diagram.  The  design  limitation  due  to  either/or  events  A  and  B  is 

pdl  «  P  (A  +  B)  «  P(A)  +  P(B)  -  P(AB)  (8) 

If  the  events  A  and  B  are  statistically  independent,  then  by  definition,  P(AB)  »  P(A) 
P(B)  .  Similarly,  for  a  case  involving  three  parameters  "a,"  *b,"  and  "c,“  one  can 
write  the  probability  of  design  limitation  to  be 

Pdl  -  P ( A+B+C)  *  P( A)  +  P(B)  +  P(C)  -  P(AB)  -  P(AC)  -  P(BC)  +  P(ABC)  (9) 
as  shown  in  Figure  7. 


Figure  7.  Euler  Diagram  Of  Three  Mot  Mutually  Exclusive  System  Events  A,  B,  C 

Design  adequacy  can  be  calculated  directly  from  the  Euler  diagram  describing  the  total 
relationship  between  adequacy  and  limitation.  Consider  the  case  of  Figure  6,  design 
adequacy  is_the  region  outside  the  Venn  diagram  and  represents  situations  in  the  which 
both  A  and  B  occur  s 

pda  •  P(Ai)  •  1  -  P(A)  -  P ( B)  ♦  P( AB)  (10) 

For  the  case  of  three  not  mutually  exclusive  events  represented  by  Figure  7 

pda  -  P(ABC)  -  1  -  P(A)  -  P(B)  -  P(C)  +  P ( AB)  +  P(AC)  +  P(BC)  -  P(ABC)  (11) 

For  the  general  case  of  "n"  not  mutually  exclusive  events  representing  *n"  system 


parameters:  ai,  . . ,  ans 

pda  »  P(  A1A2A3 . An) 

-  1  -  P(  Aj_)  -  P(A2)-...-P(An)  +  P(AiA2)  +  P(A]Aj)  +...+  P(AjAn)  +  P(A2A3)  + 

. ,.+P(A2An)  -  P(AiA2A3)  -  P(A3A2A4) P( A2A3An) + . . .  +  P(A3A2...An) 

n  n  n 


“  1  "  .E.  P(AD  +  2  P(AiAj)  -  Z  P(AiAjAk)  +...+  (-1)  n  P(A1A2...An)  (12) 

l*1  i/<j  Mj/k  1 

If  the  events  Aj,  A2,  A3,  .  .  .  An  are  statistically  independent,  then  the  compound 
probabilities  in  (12)  are  the  products  of  the  probabilities  of  the  events,  i.e., 
P(A1A2A3)  „  p(Ax) P(A2) P(A3) . 

The  preceeding  discussion  is  best  illustrated  by  an  example.  Consider  a  tactical 
air-to-air  guided  missile  ( AAM)  and  the  six  system  parameters  and  their  functional 
relationships:  (1)  Off-boresight  Angle  (OBA) 1  (2)  Target  Aspect  (TA) >  (3)  Missile 

Range:  (4)  Accuracy:  (5)  Lethality:  and  (6)  Maneuverability. 

Off-Boresight  Angle  (OBA)  is  the  angle  between  the  bore-sight  line  or  armament 
datum  line  (ADL)  and  the  llne-of-aight  (LOS)  to  the  target.  Angle-of-attack  ( AO A 
ora)  is  the  angle  between  the  ADL  and  the  flight  path  yector  v.  The  relationship 
between  (OBA),  (ADL),  (LOS),  (AOA)  ,  velocity  vector  (V),  seeker  gimbal  angle  and 
tip-off  angle  are  shown  in  figure  8.  Assume  ejection  launch,  the  missile  will 
separate  parallel  to  the  ADL,  and  because  of  the  flow  field  and  differential 
velocity,  it  will  tip-off  and  become  closely  parallel  to  the  flight  path  of  the 
launch  platform. 
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Target  aspect  is  the  target  profile  presented  to  the  seeker  during  lock-on,  tracking, 
and  the  end  game  and  is  vitally  important  to  a  successful  intercept.  It  is  the  prime 
indicator  of  the  maneuvering  intensity  required  to  achieve  an  intercept,  e.g.,  tail-on 
will  result  in  slower  closing  speed  (Vc)  whereas  head-on  V0  is  the  sum  of  the  target's 
and  missile's  individual  speeds  resulting  in  very  high-gain  maneuvering  constants  at 
intercept  terminus.  Target  aspect  effects  the  amount  and  quality  of  the  missile 
seeker's  tracking  medium,  e.g.,  exhaust  heat  for  a  heat  seeking  missile;  and  reflected 
RF  signal  for  a  radar  missile.  Various  target  aspects  are  shown  in  figure  8. 

Missile  Range,  expressed  as  Rnin  or  Rgmx>  is  functionally  related  to  seeker  sensitivity 
and  its  of f-boresight  tracking  capability  (seeker  gimbal  angle  limits);  aerodynamic 
profile  requirements  (maneuverability  and  closing  velocity  Vc)  ;  and  propulsion 
subsystem  performance.  For  every  missile  design  there  is  a  maximum  aerodynamic  range 
that  is  the  physical  resultant  of  the  propulsion  subsystem.  Launch  aircraft  airspeed 
adds  vectorally  to  the  missile's  airspeed  thereby  providing  an  additional  range 
component.  Target  aspect  and  the  resultant  Vc  can  add  or  subtract  to  the  actual 
maximum  launch  range.  For  example,  in  a  classic  forward  quarter  target  intercept,  the 
launch  aircraft's  weapons  system  may  compute  first  firing  at  a  target  distance  that 
exceeds  the  aerodynamic  range  of  the  missile,  but  is  valid  due  to  the  combined 
target/missile  closing  velocity  (Vc)  which  acts  to  cause  intercept  at  a  distance  short 
of  the  missile's  maximum  aerodynamic  range. 

Accuracy  is  functionally  dependent  upon  intercept  kinematics  plus  seeker  and  fuze 
sensitivity  and  resolution.  The  missile's  guidance  and  control  subsystem  and  its 
propulsion  subsystem  must  provide  target  intercept  within  a  distance  sufficiently  close 
so  that  the  fuze  will  cause  a  lethal  warhead  detonation. 

Lethality  is  functionally  attributed  to  accuracy,  intercept  kinematics,  and  warhead. 

Maneuverability  is  the  missile's  ability  to  roll  about  its  longitudinal  axis,  to  pitch 
(pull  g's)  about  its  lateral  axis  and  yaw  about  its  vertical  axis.  It  is  a  kinematic 
design  parameter  functionally  attributed  to  aerodynamic  ( skid-to-turn  or  bank-to-turn 
control  laws)  and  propulsion  subsystems.  Maneuverability  is  limited  by  aerodynamic  and 
structural  design  adequacy. 
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Figure  8.  Relationship  between  OBA,  ADL,  LOS,  V,  0!  and  Tip-Off  Angle. 
Tip-off  angle  »  k(0BA  +  a)  where  1.0  ^  k  <  3  is  an  empirical  number,  and 
gimbal  angle  must  be  2  than  tip-off  angle  to  maintain  lock-on. 

Consider  the  case  of  four  operationally  related  variables  whose  events  am 
not-mutually  exclusive  and  are  statistically  independent.  Let  "A"  represent 
of f-boresight  limitation,  "B*  is  aspect  limitation,  "C"  represents  range  limitation  and 
*0*  is  accuracy  limitation  events.  Figure  9  shows  the  design  limitation  diagram  for 
this  case,  it  shows  2*  •  16  disjoint  regions. 
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Figure  9.  Design  Adequacy/Limitation  Diagram  Of  A  Hypothetical  Tactical  Missile 

Consider  the  case  where,  through  simulation  (using  Monte  Carlo  or  other 
techniques)  of  many  .encounters ,  the  system  design  limitations  are,  P(A)  =  .1, 

P(B)  "  .05,  P(C)  ■  .08  and  P(D)  *»  .05.  It  is  desired  to  know  the  design  adequacy  of 
this  hypothetical  missile.  From  equation  (12) , 

Pda  -  P(ABCD) 

Since  A,  B,  C  and  D  are  statistically  independent,  then 

Pda  “  P<A)  P  ( B)  P(C)  P(D) 

=  (.9)  (.95)  (.92)  (.95)  -  0.75 

For  this  example,  P(A)  accounts  for  the  limitations  due  to  A  only  and  limitations  due 
to  ab,  AC,  and  AD,  as  shown  in  Figure  9. 

4.2  Design  Adequacy  Variables 

If  a  system  is  operable  when  needed  but  fails  to  complete  the  assigned  mission 
successfully,  then  the  failure  is  associated  with  design  inadequacy.  As  the 
operational  stresses  and  the  mission  variability  increase,  the  frequencies  of  physical 
failure  and  design  limitation  may  also  increase.  Moreover,  operational  requirements 

sometimes  exceed  design  objectives.  For  example,  an  increase  in  target 

maneuverability,  or  a  decrease  in  vulnerability  can  result  in  a  decrease  of  system 

effectiveness.  Similarly,  a  surface-to-air  radar  designed  for  air  targets  may  have  no 
system  effectiveness  against  land  targets.  Design  limitation  events  occur  very 
dynamically  and  in  a  mixed  order  during  syBtem  employment.  The  outcomes  of  these 

events  are  represented  by  random  variables. 

Statistically,  design  adequacy  is  concerned  with  both  discrete  and  continuous 

random  variables.  The  number  of  design  limitations  (frequency)  in  a  given  mission,  and 
the  number  of  poorly  designed  parts,  such  as  detectors  with  sensitivity  limitation, 
power  supply  with  limited  current,  seeker  with  limited  gimbal  angle,  or  kinematic  parts 
of  low  performance  are  discrete  random  variables.  Also,  in  air-to-air  encounters,  the 
time  between  successive  gimbal  angle  limitation,  the  time  between  kinematic  constraints 
and  time  between  losing  lock-on  due  to  Inadequate  seeker  sensitivity  are  continuous 
random  variables.  Similarly,  the  time  between  acceptable  message  transmissions  in  a 
communication  system,  or  satisfactory  delivery  in  a  transportation  system  are 
continuous  random  variables.  These  examples  suggest  that  design  adequacy  data  can  be 
collected  in  either  form,  as  discrete  or  as  continuous  random  variable  observations,  at 
the  discretion  of  the  data  collection  designer. 

5.0  Design  Adequacy  Prediction  of  a  Hypothetical  Air-to-Air  Weapon  System 

The  system  effectiveness  analysis  of  an  air-to-air  weapon  system  involve 
consideration  of  five  elements  and  their  interactions.  Those  elements  are  launch 

platform,  pilot,  avionics,  missile,  and  target.  bach  element  of  an  air-to-air  weapon 
system  conoists  of  several  subsystems.  For  example,  the  missile  consists  of  five 
subsystems!  guidance  and  control,  airframe,  propulsion,  warhead,  and  fuze.  A  logical 
approach  to  the  quantification  of  weapon  syBtem  design  adequacy  in  to  consider  three 
operationally  sequential  and  interrelated  phases.  The  three  phasen  are  (1)  pre-launch, 
(2)  Intercept  (free  flight)  and  (3)  end-game.  Design  adequacy  of  the  weapon  system  Is 
a  function  of  the  system  limitation  of  each  phase.  System  limitation  probabilities 
during  the  three  phases  are:  launch  opportunity  limitation  Pi0l»  intercept  limitation 

Pjl  and  kill  limitation  Pkl>  Figure  10  is  the  design  limitation  diagram  of  the  three 
phases  of  the  weapon  system. 
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A  *  (pre-launch  limitations) 
B  -  (intercept  limitations) 

C  »  (end-game  limitations) 


Figure  10.  Design  Limitation  Diagram  Of  An  Air-To-Air  Weapon  System 
From  Figure  10: 

Pdl  “  P(A)  +  P(fl)  +  P(C)  -  P(AB)  -  P ( AC)  -  P(BC)  +  P(ABC)  (13) 

Where  P(A)  -  Piolr  P(B)  -  Pa,  and  P(C)  «  Pkl. 

The  system  limitation  events  of  one  phase  are  not  mutually  exclusive  of  the  limitation 
events  of  the  other  phases,  and 

pda  -  (1  -  Plol)  (1  -  PU)  (1  -  Pkl>  „  plo  Pipk  (14) 

The  probabilities  Pi0,  Pi  and  Pk  are  conditional  probabilities  of  the  sequential 
events,  pre-launch,  intercept  and  end  game,  where  PiQ  =  probability  of  launch 
opportunity.  Pi  »  probability  of  intercept,  and  Pk  ■  probability  of  end-game  kill. 

plo  the  probability  of  being  in  a  position  within  the  Launch  Acceptability 
Region  (LAR)  at  some  instant  from  acquisition  time  to  the  end  of  the  encounter.  It  is 
the  probability  of  in-envelope  launch  given  a  ready  and  reliable  system.  This 
parameter  is  a  measure  of  the  capability  to  shoot  early,  i.e.,  a  high  PiD  is  indicative 
of  a  high  capability  to  shoot  first,  and  is  a  function  of  target  acquisition  by  the 
pilot  and  the  weapon.  It  is  a  measure  of  the  pilot's  ability  to  maximize  the 
probability  of  being  within  the  missile  launch  envelope  after  target  acquisition  and 
before  firing. 

P^  ■  probability  of  intercept,  given  in-envelope  launch.  Pj  is  the  probability 
of  the  weapon  intercepting  the  target  within  the  Intercept  Acceptability  Region  ( IAR) , 
and  accounts  for  the  kinematic  and  guidance  and  control  parameters. 

Pk  ■  probability  of  kill  given  intercept.  Pk  is  the  end-game  probability  of 
kill  and  is  directly  related  to  the  missile  intercept  angle,  the  region  of  fuze 
activation,  and  warhead  effectiveness. 

Referring  to  the  system  effectiveness  equation  Pse  =»  P,ja  Pr  psr»  and  substituting 
for  Pda  from  equation  (14)  gives  the  system  effectiveness  of  the  air-to-air  weapon 
system  expressed  in  terms  of  the  conditional  probabilities  pi0,  Pj,  Pk,  Pr  and  Pst; 

pse  "  Pda  Pr  Par  *  Plo  Pi  Pk  Pr  psr  (15) 

■  (1  -  Plol)  U  "  Pil>  (1  "  Pkl>  (1  "  prl>  U  -  Peril 

-  P  (ABODE)  _ 

■  P  (A/6E)  P(B/SDE)  P (€/ ABDE)  P(D/E)  P ( E) 

as  shown  in  Figure  11,  which  shows  there  are  (2)5  ■  32  disjoint  regions. 


Figure  11.  Bystem  Ef  feet  1  vcu«mi/Limi  tat  ion  Diagram 
Of  An  Air-To-Air  Weapon  System 
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The  launch  acceptability  region  (LAR)  is  a  volume  representing  the  missile  launch 
envelope  within  the  target  acquisition  space.  It  is  the  region  of  valid  launch  and/or 
firing  opportunities.  The  intercept  acceptability  region  ( IAR)  is  a  volume  within 
which  the  missile  will  intercept  the  target.  The  kill  acceptability  region  (KAR)  is  a 
volume  about  the  target  within  which  given  missile  passage  the  weapon  is  lethal.  The 
events,  valid  launch,  intercept  and  kill  occur  in  the  LAR,  IAR,  and  KAR  regions.  These 
events  are  multivariates  and  require  three  variables  for  their  description. 

5.1  System  and  Subsystem  Parameters 

The  prime  objective  of  system  effectiveness  analysis  is  the  minimization  of 
limitations;  for  the  hypothetical  tactical  missile,  limitation  is  the  bounded  area 
within  the  non-overlapping  edges  of  the  regions  in  Figure  11.  The  first  step  in  the 
minimization  process  is  to  identify  and  quantify  the  sources  of  limitation.  The  next 
step  is  to  establish  the  relationship  between  them.  The  third  step  requires  relating 
system  and  subsystem  parameters  to  the  measures  of  design  adequacy  (MOA) . 

It  is  desired  to  relate  the  weapon  system  measures  of  adequacy  Pio*  Pi,  Pk»  to  the 
system  and  subsystem  functional  parameters.  Over  the  three  phases  of  the  engagement, 
the  subsystems  are  (1)  target,  (2)  pilot  target  acquisition  avionics,  (3)  missile 
guidance  and  control,  (4)  missile  airframe  and  propulsion,  and  (5)  missile  warhead  and 
fuze.  The  system  capability  is  the  collective  attribution  of  the  performance  of  these 
subsystems.  The  operational  weapon  system  parameters  are;  (1)  target  acquisition 
(pilot,  avionics,  and  weapon),  (2)  of f-boresight  angle  (OBA) ,  (3)  target  aspect  (TA) 
which  is  the  target  view  presented  to  the  launch  aircraft  or  missile  frosi  any  point  in 
a  target-centered  sphere  of  view.  All-aspect  would  be  the  capability  to  detect  and 
track  a  target  regardless  of  its  presented  aspect,  (4)  kinematics  of  platform,  target 
and  missile,  (5)  Intercept  miss-distance,  (6)  lethality,  (7)  physical  characteristics. 
The  functional  relationship  between  subsystems  parameters  as  the  independent  variables 
and  system  parameters  as  the  dependent  variables  is  given  in  Table  1.  For  example: 

Pilot  target  acquisition  ■  F  (target  characteristics,  acquisition  aids,  guidance, 
aircraft  and  missile  kinematics) 

Of f-boresight  *  F  (target  characteristics,  pilot  acquisition  aids,  guidance  and 
control,  kinematics) 

Target  Aspect  Angle  -  F  (target  characteristics,  seeker  detection  and  tracking 
capability) 

The  weapon  system  Measures-of-Adequacy  (MOA)  as  the  dependent  variables  are 
related  as  follows: 

Plo  =  F  (OBA,  TAA,  target  acquisition) 

Pj  =  F  (intercept  miss-distance,  kinematic,  physical  parameters) 

Pk  =  F  (lethality,  kinematic,  physical  parameters) 

TABLE  1 
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For  the  short  range  air-to-air  case,  the  probabilities  pi0,  Pi  and  p^  are 
determined  by  simulating  a  large  number  of  encounters  and  accounting  for  the  various 
target  character istics  such  as  maneuverability,  velocity  and  radiation  cross  section. 
The  simulation  is  mechanized  into  three  consecutive  stages  representing  the  operational 
phases  of  the  system.  The  simulation  runs  of  the  second  stage  assume  the  events  of  piQ 
has  occurred,  and  those  of  the  end-game  stage  assume  the  events  of  pi0  and  pi  have 
occurred.  Data  from  mock  combat  can  be  used  to  validate  the  simulated  values  of  Pi0* 

Table  2  shows  the  functional  relationship  between  the  system  parameters  and  the  MOA's. 

TABLE  2 

MEASURES-OF-ADEQUACY  AND  SYSTEM  PARAMETERS 
A/A  WEAPON  SYSTEM 


Figure  12  represents  the  design  limitation  during  the  three  weapon  systems  employment 
phases.  The  figure  relate  the  system  parameters  to  the  measures-of-limitation,  MOL. 
Refer  to  equation  (15)  and  let: 

Plo  “  •  85 ,  Pi  -  .9,  Pit  ■  .95,  Pr  *  .89,  Psr  «  .96, 

then 

Pse  “  (-85)  (.9)  (.95)  (.89)  (.96)  -  0.62 
However  if  Pr  ■  Psr  ■  1.0  then 

pse  ■  (.85)  (.9)  (.95)  (1.0)  (1.0)  -  .726 
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With  the  aaauaption  Pt  -  Pet  -  1.0,  the  system  effectiveness  equation  reduces  to 
Pse  •  Pda>  and  the  measure-of-adequacy  MOA,  becomes  measure-of-ef f ectiveness  HOE.  For 
an  air-to-air  weapon  system,  there  are  other  measures-of-adequacy,  such  as  exchange 
ratio,  first  firing,  first  kill  and  time-in  envelope. 


Figure  12.  Design  Limitation  Diagram  Of  An  Air-To-Air  Weapon  System 
S.2  Design  Adequacy  Parameters  Simulation 

Design  adequacy  of  an  air-to-air  missile  includes  sensitivity  to  variations  in 
altitude,  required  G‘s  or  maneuverability  of  the  launch  platform,  closing  or  opening 
range  rate,  and  launch  speed  among  others.  Figure  13  shows  kinematic  sensitivity 
comparison  between  two  missile  designs.  These  plots  summarize  the  results  of  several 
hundred  Monte  Carlo  simulation  runs  based  on  a  six  degrees  of  freedom  mode] ,  The 
kinematic  parameters  are  altitude,  target  G's,  range  and  closing  velocity  (Vc)  .  The 
ordinate  of  the  plots  is  the  probability  of  intercept. 
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Figure  13.  Probability  Of  Intercept  Pj  Vernus  Kinematic  Parameters 

Of  Two  Missiles 
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Figures  illustrate  noaiinal  "dogfight*  missile  envelope  -  target  centered. 
AAM  LAUNCH  ENVELOPES :  10  units  altitude,  coaltitude  with  target. 


Figure  14. 


Figure  15. 


At  lainchi  Ftr  vel. (Vf)  «  MO. 8  “  Tqt  vel.  At  launch:  Ftr  vel. (Vf)  =  MO. 8,  igt  vel. (Vt)  =  M0.95 

Target  starts  immediate  5g  horiaontal  starts  immediate  5g  horizontal  right- 

right-hand  turn.  hand  turn. 

The  drama  of  design  limitations  is  very  apparent  upon  examination  of  the  launch 
envelopes  shown  in  Figures  14  and  15.  The  figures  give  system  design  boundaries  due  to 
kinematic  factors  (shaded  areas)  and  sensor  parameters  (dashed  area).  Valid  launch 
must  occur  within  the  overlapping  regions  of  the  two  boundaries.  One  can  observe  that 
even  a  0.15  Mach  change  in  target  velocity  has  a  substantial  effect  on  both  inner  and 
outer  envelopes.  it  should  be  pointed  out  that  these  are  instantaneous  envelopes  and 
are  valid  if  and  only  if  the  target  maintains  the  maneuvering  condition  Indicated  on 
the  plots.  That  is,  a  sudden  reversal  in  the  direction  of  turn  accomplished  by  a  half 
roll  will  nullify  a  significant  part  of  the  envelope  for  launches  inside  the  target 
turn  beyond  10  units  radius  in  Figure  15.  The  theoretical  envelopes  emphasize  that 
operationally,  the  dynamics  of  the  situation  deform  the  launch  envelopes  in  a  highly 
unpredictable  manner. 

Conclusion 

System  design  adequacy  is  an  effectiveness  factor  which  is  a  measure  of  the 
capability  of  a  system  to  perform  its  function.  It  is  the  key  effectiveness  factor  in 
the  early  stages  of  system  development.  Design  adequacy  of  a  system  is  a  function  of 
the  performance  parameters  of  its  subsystems  and  the  environment.  The  paper  presents  a 
design  adequacy  quantification  model  which  accounts  for  the  interdependence  between  the 
buildinq  blocks.  In  a  weapon  system  context,  the  performance  parameters  of  guidance 
and  control  subsystems  are  interdependent  with  the  parameters  of  the  remaining  subsystem:,. 
Therefore,  the  effectiveness  of  the  guidance  and  control  subsystem  is  highly  dependent 
on  this  Interaction.  The  quantification  methodology  requires  determining  the  MOA'o, 
the  system  and  subsystem  parameters.  The  determination  of  accurate  relationship 
between  these  parameters  requires  indepth  knowledge  of  the  hardware  and  is  a  very 
serious  system  engineering  problem. 


3SN3dXH  1N3WNU3AOO  J  V  U33(UHHI.I  III 


Laachester ,  F.W.,  *Aircraft  in  Warfarei  the  Dawn  of  the  Foucth  Arm*,  D.  Appleton  fc 
Co.,  Hew  York,  1916. 

Weapon  System  Effectiveness  Industry  Advisory  Committee  (WSEIAC) ,  AFSC-TR  6S-2 
Vol.  II,  January  1965. 

Heliability  Engineering,  ARINC  Research,  Prentice  Hall,  1964. 

Hohl,  J.G.,  'System  Operational  Readiness  and  Equipment  Dependability*,  IEEE 
Transation  on  Reliability,  Vol.  R-15,  Ho.  1,  Hay  1966. 

‘System  Analysis  and  Policy  Planning*,  E.S.  Quade  and  W.I.  Boucher  (ed.) ,  American 
Elsevier  Publishing  Co.,  Inc.,  New  York,  1969. 

Babayeb,  A.R.,  'System  Decomposition,  Partioning  and  Integration  for 
Hicroelectronics* ,  IEEE  Transaction  on  System  Science  and  Cybernetics,  July  196S. 

Feller,  W.,  *An  Introduction  to  Probability  Theory  and  Its  Applications*,  Vol.  I, 
John  Wiley  and  Sons,  Inc.,  1962. 

Parzen,  B. ,  'Modern  Probability  Theory  and  Its  Application”,  John  Wiley  and  Sons, 
Inc.,  1960. 

‘Systems  Engineering  Methodology  and  Applications*,  A.P.  Sage  (ed.),  IEEE  Press, 
New  York,  1977. 


Acknowledgements : 

Part  of  this  paper  was  researched  and  written  in  1982  when  the  author  was  at 
Yarmouk  University,  Irbid,  Jordan. 


a&IUdXd  UAJMUOUdJH 


THE  EVOLUTIVE  STATE:  A  NEW  DEFINITION  OF  SYSTEM  STATE 
TO  INCLUDE  SEQUENCING  OF  EVENTS 

by 

Prof.  VAmoia 
Politecnico  di  Milano 
1st.  di  Elettrotechnica  e  Elettronica 
Piazza  Leonardo  da  Vinci  26 
Milano,  Italy 

and 

Ing.  R-Somma 
Selenia  Spazio 
Divisiooe  Sisteme  Spaziali 
Via  S  Alessandro  28/30 
1-00131  Roma,  Italy 

ABSTRACT 

The  usual  reliability  modeling  Is  based  on  the  intraduction  of  a  system  state  (herewith  referred  to  as  macrostate) 
identified  by  the  operating  conditions  (good,  failed)  of  the  system  components.  The  inclusion  of  the  information  about 
the  states  sequencing,  absent  in  the  classical  description,  leads  to  the  introduction  of  the  concept  of  microstate.  This 
concept  leads  to  a  transition  diagram  structure,  whoee  peculiarity  ie  exploited  to  derive  a  useful!  computational 
procedure  for  the  state  probabilities. 


1.  INTRODUCTION 

The  classical  approaches  to  system  reliability  are  based  on  the  concept  of  system  state,  which  is  identified  by  the  set 
of  operating  conditions  of  the  system  components. 

If  each  component,  ss  usual,  is  described  by  two^mutualiy  exclusive  operating  conditions,  i.e.  good  and  failed,  a  system 
composed  of  n  components,  i.e.  of  order  n,  has  2n  states. 

In  this  paper,  for  reasons  which  will  become  evident  later  on,  each  one  of  the  above  states  will  be  referred  to  as 
macrostate  or  operating  state  of  the  system. 

Let  us  now  consider  the  following  simple  example.  A  system  of  order  3  has  the  reliability  block  diagram  of  fig.  1. 


B  and  C  are  two  identical  units,  C  being  the  cold  redundancy  of  B.  A  represents  the  switch,  which  is  needed  to  activate 
the  redundancy  In  case  of  failure  of  B. 

The  following  realistic  assumption  is  made;  the  effect  of  a  failure  of  A  is  that  the  switch  remains  in  the  position 
occupied  at  the  time  the  failure  happens. 

Being  the  system  of  order  3,  it  has  the  8  macrostate*  given  In  tab.  1,  where  O  represents  the  "good"  and  1  the  "failed” 
condition. 


TAB.  1 


n. 

A 

B 
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The  Qfaph  which  represents  the  transition*,  in  cate  of  no  repair,  it  given  in  fig.  2,  where  <l's  ere  the  components 
feiliee  ratee. 


In  tab.  1,  no  information  about  the  tyetem  ability  to  perform  it  associated  to  the  macrostate  S.,  in  fact  this 
macrostate  may  be  good  or  failed  respectively  if  B  fails  before  A  or  viceversa,  i.e.,  according  to  the  graph  of  fig.  2  if 
S,  is  reached  trough  the  path  Sg-S--S,  or  S_-S. -S..  Therefore,  once  the  probability  of  S,  has  been  evaluated  by 
whatever  a  method,  one  cannot  associate  this  probability  to  any  of  the  system  operating  conditions,  unless  it  is 
possible  to  split  it  into  the  two  contributions  pertinent  to  tha  two  paths  identified  above. 

Now,  as  in  general  such  a  partitioning  is  not  possible  a  posteriori,  there  are  cases,  like  the  one  used  as  an  example,  or 
in  general  when  the  needed  information  is  carried  out  by  sequencing  of  events  leading  to  a  certain  state  rather  than  by 
occupation  of  the  state  itself,  where  the  classical  description  in  terms  of  macrostates  is  not  sufficient  to  solve  the 
reliability  problem. 

AU  the  above  motivates  the  introduction  of  the  microstate  (or  evolutive  state)  concept,  which  enriches  the 
information  content  of  the  classical  macrostate  by  adding  the  sequencing  of  events.  The  resulting  peculiar  system 
states  transition  diagram  will  be  presented  in  this  paper,  together  with  tome  theoretical  results  allowing  an  easy 
evaluation  of  the  evolutive  states  probabilities. 

2.  THE  MICROSTATE  AND  THE  DYNAMIC  TREE 

Microstate  or  evolutive  state  of  a  system  is  the  set  of  information  carried  by  a  macrostate  and  by  the  sequence  of 
transitions  leading  to  it. 

According  to  the  above  definition,  each  macrostate  which  In  a  classical  reliability  transition  diagram  can  be  reached 
by  more  then  one  path,  will  generate  a  different  microstate  for  each  different  path. 

With  reference  to  the  example  of  fig.  1,  this  is  clarified  in  the  following  fig.  3: 
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In  fig.  3,  differently  from  fig.  2,  each  micraatata,  r  can  be  reached  by  only  one  path,  therefore  it  evidentiate*  both 
the  operating  condition  of  the  component!  and,  what  tonetitutee  the  added  information,  the  sequence  of  event!  leading 
to  auch  an  operating  condition. 

The  companion  of  fig^  2  and  J  puts  the  Mts  of  microetatee,  S^,  and  that  of  macroatatea,  it  in  the  following 
correapondanca: 


50  ~  {so}  S4  ~  {*3} 

51  **  {sl}  S5-{s5's8} 

52  «  {S2}  Sg  «•  {S;.  Sg} 

53  **  (sf| '  s6l  S7  **  {s10*  sll'  s12'  s13*  s14*  s15  } 


The  splitting  of  5,  into  s,  id  a,  eliminate!  the  ambiguity  preaent  in  tha  description  in  terms  of  macroatate.  In  fact 
now,  according  to  the  description  given  previously,  a-j  pertains  to  tha  set  of  good  states,  while  is  a  failed  state. 

The  elimination  of  the  above  ambiguity,  is  paid  in  terms  of  elarged  number  of  system  states,  which  is  now  grater  than 
the  usual  2"  (for  a  system  of  order  n).  In  general  the  number  of  microstatea  is  infinite,  as  can  be  immediately  derived 
with  reference  to  the  simple  repairable  component  with  an  unlimited  repair  possibility,  the  microstate  transition 
diagram  of  which  is  depicted  in  fig.  4,  as  it  is  well  known  for  those  familiary  with  the  Revewal  theory: 


Fig-  < 


The  problem  is  now  the  eearc h  of  proparties,  algorithms  and  rules  to  cope  with  such  a  large  number  of  microstatea  (and 
then  of  equations),  so  as  to  have  the  opportunity  of  exploiting  to  advantages  of  the  enriched  information  content. 

To  that  purpose  let  us  consider  a  system  of  order  n  (i.e.  having  2  macrostates);  as  each  component  has  two  mutually 
exclusive  operating  conditions,  the  moat  general  case,  from  a  transition  point  of  view,  is  the  one  in  which  each 
component  can  be  subjected  to  the  transition  leading  it  to  the  state  opposite  to  the  one  presently  occupied.  Less 
general  cases  may  be  obtained  by  simply  eliminating  the  branches  corresponding  to  not  allowed  transitions. 

Let  us  assume  that  the  system  is  in  ths  microstate  in  which  ell  its  components  are  in  the  "good”  condition  and  the 
system  is  released  for  the  first  time  into  operat  ion.  r  . 

When  one  of  the  components  changes  its  operating  condition,  the  system  changes  its  microstate  reaching  one  of  the  n 
possible  configurations  characterized  by  1  failed  component  and  (n-1)  good  components. 

Next  event  may  be  the  repair  of  the  failed  component  of  the  failure  of  one  of  the  (n-1)  good  components. 

Notice  that  in  the  macrostate  description  the  repair  is  s  backwsrd  transition  leading  the  system  into  the  mecrostate 
occupied  in  advance.  On  the  contrary,  in  microstatea  terms  also  the  repair  is  a  forward  transition  leading  the  system 
to  a  "new"  microstate,  characterized  by  the  tame  macroatate  information  but  by  a  different  trajectory.  ^ 

Notice  also  that  the  microstate  reached  by  the  sequence  "failure  of  component  i,  failure  of  component  j”  is  different 
from  the  one  reached  by  the  sequence  "failure  of  component  j,  fillers  of  component  i"  even  if,  once  again,  the 
resulting  macrostate  it  the  same. 

Going  on  with  the  same  procedure,  one  has  immediately  that  starting  from  each  microstate  the  system  may,  in 
general,  reach  n  new  microstatea,  soma  of  which  may  pertain  to  macrostates  already  encountered  during  the  system 
evolution. 

The  resulting  transition  diagram  is  a  directed  n-ary  tree  [i J  ,  as  shown  in  Fig.  b,  where  the  figures  on  the  branches 
identify  the  components  which  cause  the  transition 
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Thi*  w  a  vary  wall  know  topological  itructura  [l]  ,  formal  by  nodet  (  tha  microatatea)  and  directad  branch**  (  the 
tranaitiona)  connecting  them. 

Tha  atructtre  ia  organized  by  lavela.  The  atarting  level  (level  0)  hea  only  one  node,  called  rooth,  correaponding  to  the 
initial  mkr aetata,  in  which  the  ayatem  ia  put  into  operation  far  the  firet  time. 

Next  level  (level  1)  hoe  in  general  n  nodaa,  which  are  reached  atarting  from  tha  rooth  by  the  n  directad  branchea,  each 
repreeenttng  the  failure  of  one  component. 

Next  level  (level  2)  containe  microatatea  which  require  two  aubeequent  event*  to  be  reached. 

In  general,  the  level  of  a  microatate  ia  defined  by  the  number  of  tranaitiona  neceaaary  to  reach  that  microatate 
atarting  from  the  rooth,  a  . 

A  collection  of  rulea  to  dSfine  the  aet  of  the  macroatatea  and  that  of  the  microatatea  and  to  pass  from  one  set  to  the 
other  ia  contained  in  [2]. 

If  now  tha  attention  ia  put  on  the  general  microataste  a.  and  the  assumption  ia  made  of  constant  transition  rates,  one 
can  state  that: 

the  system  ia  in  s.  at  the  time  (t  *  At)  if  it  was  already  there  at  tha  time  t  and  no  transition  occurred  in  the 
aubeequent  time  interval  At,  or  if  the  system  was  in  the  microatate  a.,  immediately  proceeding  at  time  t  and  the 
transition  leading  from  a.  to  a.  has  taken  place  in  the  time  interval  At.Mn  formula,  and  in  probability  terms: 


PU+At)  .  {1  -  (22).  At}  P  (t)  ♦  2  P.(t)4t 

1  1  t  ‘  1  ij  j 


from  which  one  has  immediately: 


Pt(t)  -  -{H){  Pt<t)  .  2  P.(t) 


where  (  H  )■  represents  the  sum  of  the  transition  rates  of  the  branches  going  out  from  s^. 
In  particular: 


P  (t)  =  -{ID  P  (t) 
o  00 


duo  to  the  fact  that  s  ia  the  first  microatate  and  has  not  a  predecessor. 
If,  as  usual,  the  initiaP condition  ia: 


P  (0)  «  1 

O 


tha  *01111100  of  eq.  (3)  is  given  by: 


All)  t 


P  (t)  =  e 
o 


Now,  each  microatate  of  the  first  level,  «j,  derives  from  8q,  therefore,  according  to  (2)  and  considering  (5): 


P^t)  -  AlD^  Pj(t)  +  l{  e 


All)  t 
o 


Solving  each  one  of  the  equations  (6)  the  probabilities  of  the  microstates  of  the  first  level  may  be  easily  evaluated. 
These  probabilities  are  used  to  write  down  the  equations  of  the  microstates  of  the  second  level,  which  are  similar  to 
eq.  (6).  And  so  on  for  the  subsequent  levels. 

AU  the  above  outlines  that  even  if  the  number  of  variables,  the  probabilities  of  the  inicrostates,  has  been  increased 
with  respect  to  the  description  in  terms  of  macrostates,  their  evaluation  is  simpler,  as  by  proceeding  by  levels  each 
variable  requires  the  solution  of  an  uncoupled  differential  equation. 

If  now  the  attention  is  put  to  the  structure  of  fig.  bf  and  to  the  procedure  that  have  generated  it,  one  can  easily 
observe  that  starting  from  s  on,  each  transition  from  a  microstate  partitions  the  subsequent  microstates  into 
separated  possible  system  evol&ions,  which  never  converge. 

A  basic  theorem  refers  to  the  above  separation  property;  it  is  given  herebelow. 

Theorem  (fundamental): 

let  *.  be  any  microstate  of  a  system  of  order  n,  and  s..  ,  J  *  1,2,  ,  n,  the  microstates  which  can  be  reached  with  only 

one  transition  from  s.  (i.e.  the  sons  of  s^).  fclach  a  is  in  turn  the  root  of  a  subtree. 

The  probability  associated  with  the  overall  set  of  the  microstates  in  the  subtree  of  any  root  a  ,  is  given  by  the  product 
of  the  following  two  terms: 

a)  tha  probability,  ly  (t),  associated  with  tlie  overall  sat  of  microstates  generated  by  «i. 

b)  the  ratio  between  Ihe  transition  rate  pertinent  to  the  transition  from  e.  to  s.  and  the  sum  of  all  the  transition 

rates  going  out  of  Sj  (connecting  than  s^  with  all  the  possible  Sj  ).  1 
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In  formula,  if  P^  +  ^  j(t)  indicata*  tha  probability  of  tha  >at  of  microstates  of  the  (ubtree  of  rooth  a.j,  one  hat: 

1  'i 


P,  _  .(t)  .  - 

<i  -tf  )  n 

J  1  4  V 


i  2  j 

j.l  V* 


Proof  [3]  : 

Tha  differential  aquation  asaociated  with  any  microstata  «.^  it  (tee  alto  eq.  (2))  : 


P  (t)  -  i  P  (t)  -  2  iv  ,  P,  <t)  .  KKj<n 

J  V  k.i  klij 


where  the  aummation  in  the  tocond  term  represents  tha  cumulative  transition  rate  of  the  transitions  leading  the 
system  out  front  a... 

Each  term  in  the  'above  summation  appears,  as  a  positive  term,  in  the  differential  equation  of  the  microstates  which 
can  be  reached  from  s. .  with  only  one  transition.  This  last  aquation  contains  also  a  negative  summation  of  terms,  which 
appear  as  positive  terhw  in  the  subsequent  equations  and  to  on.  If  in  such  a  process  is  continued  untill  an  absorbing 
microstata  it  reached,  the  summation  disappears  from  its  equation. 

Therefore,  when  in  the  second  term  of  the  differential  equation  of  any  microstate  a  negative  summation  is  present, 
the  microstate  is  not  absorbing  and  the  elements  of  the  summation  appear  as  positive  terms  in  the  equation  of  the 
microstates  generated  by  it. 

As  a  consequents  sum  of  the  differential  equations  relative  to  s..  and  to  the  microstates  originated  by  it  with  any 
possible  number  of  transition  is:  " 


V  sF  )(t)’  VVt)  ' 

1  ‘j  3 


Therefore  by  summing  over  j: 


i 


V"  •  ,*.  V  v” 


Furthermore,  according  to  the  previous  equation: 


P1U)-- -  P(i  +F  )U) 

tj.i  3  J 


By  Introducing  this  last  equation  in  the  previous  one  we  obtain: 


P(VF  l"3’^ -  V 

1  3  * 

i-l  J 
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the  inteip'ation  of  which  prove*  the  theorem,  if  at  t  =  o  system  is  initialized,  i.e.  put  into  operation  for  the  first 
time. 

Baaed  on  the  above  result,  a  computing  procedure  will  be  described  in  the  next  section. 

Before  going  into  it,  we  observe  that,  as  it  has  been  shown  in  [4]  ,  the  classical  Markov  approach  in  terms  of 
macro  states  can  be  formally  obtained  starting  from  the  microstates  equations  if  the  conditions  of  mergeability  are 

satisfied. 

These  conditions  imply,  in  particular,  that  different  microstates  pertaining  to  the  same  macrostate  (and  then  which 
have  to  be  merged  into  it)  cannot  have  trajectory  conditioned  transition  rates. 

This  is  an  intrinsic  limitation  of  the  Markov  approach,  which,  for  example,  requires  an  unlimited  set  of  spares  for 
repairable  systems. 

3.  A  PROPOSED  COMPUTING  PROCEDURE 

With  reference  to  a  system  of  order  n,  the  following  approximate  computing  procedure  is  based  on  the  fundamental 
theorem  given  in  the  previous  section. 

One  has  immediately,  tee  also  eq.  (5); 


-(2/)  t 

P  (t)  =  e  °  (8) 


Than,  of  course,  the  cumulative  probability  of  ail  the  remaining  microstates  (sons  of  8Q),  is  given  by: 


(t)  =  1  -  P  It)  (9) 

F  o 

o 


Now,  according  to  the  referred  theorem,  the  overall  probability  of  the  general  subtree  having  rooth  on  the  first  level 
is: 


Pi  v  (t) 

,+Fi 


1,0 


(2  <£  ) 


1  -  P  (t )] 


(10) 


At  this  point  the  subtrees  are  examined  to  analyze  if  they  can  cumulatively  be  associated  to  a  certain  condition  for 
the  system  (e.g.  system  failure)  relevant  to  be  problem  at  hand.  In  this  case  the  pertinent  probability  computed  by  (1U) 
is  associated  with  such  ijjndition. 

Among  the  remaining  1  level  subtrees,  the  one  having  the  highest  probability  is  selected,  and  the  probability  of  its 
rooth  s.  is  evaluated  by  solving  its  equation  of  kind  (6). 

The  probability  p.(t)  is  therefore  evaluated  and  associated  to  the  condition  which  is  satisfied  in  s.. 

Furthermore  U)  i«  evaluated  by  substracking  Pj(t)  from  P|  +  p  (t)  of  eq.  (10). 

At  this  point  tfJ  2^  level  subtrees  originated  by  the  evaluated  s!  are  considered  by  applying  the  same  procedure. 

These  subtrees  are  examined  in  terms  of  system  conditions  toassociate  them  to  any  condition.  The  remaining  are 
considered  together  with  those  not  evaluated  of  the  Is  level,  in  Bearch  of  the  new  "pivot". 

The  procedure  it  continued  until  when  the  sum  of  all  the  conaidered  microstate*  differs  from  one  by  an  amount  lower 
than  an  allowed  error. 

To  the  purpose  of  a  better  appreciation  of  the  above  procedure,  let  us  consider,  as  an  example,  the  system  in  fig.  1,  to 
which  the  following  values  are  applied: 


-  200  FIT 


<«B  =  3500  FIT 


350  FIT  (IF  B  GOOD) 
3500  FIT  (IF  B  FAILED) 


It  is  requested  to  evaluate  the  system  reliability  for  t  -  IQ  years  =  87600  hrs. 

The  applicable  dynamic  tree  is  as  in  fig.  3,  from  which  one  het  immediately,  according  to  (S): 

Pa  =  0.701328  (System  good) 

Again,  according  to  (9): 

Pfo  =  1  -  0.701328  -  0.298672 
and,  due  to  the  fundamental  theorem! 

f>l  *  F  .  — -  x  U.29B67;  0.02SH  1 1 1 
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;  X  0.298672  =  0.258111 


■  x  0.298672  =  0.0167692 


The  "pivot"  is  the  subtree  originated  by  s^,  then: 

P2  (t)  =  3500  x  IQ'9  Po  (t)  -  3700  x  10‘9  P2  (t) 


The  solution  of  which  yelds: 


Therefore: 


P2  =  0.218357 


Pp2  is  the  new  pivot,  then  one  has: 


Pf2  =  0.258111  -  0.218357  =  0.039756 


(System  good) 


P4li,  =  ^2=  x  0.039756  =  0.0376051  (System  failed) 

6  +  12  3700 


:  x  0.039756  =  0.0021689 


If  Pp  and  Pq  indicate  respectively  the  evaluated  probabilities  of  success  and  failure  for  the  system,  one  has: 

PQ  =  Pn  ♦  P,  =  0.919685  (System  good) 

Pp  =  P^  ♦  32  =  0.0376051  (System  failed) 

Pp  +  Pq  =  0,9572901  (overall  evaluated  probability) 

Therefore  if  the  evaluation  would  be  truncated  at  this  point  the  resulting  maximum  error  would  be: 

1  -  Pp  -  PQ  =  0.0627099 

If  the  above  maximum  error  is  not  acceptable  by  the  required  accuracy,  as  it  is  probably  the  case  with  a  figure  like  the 
one  above,  one  has  to  select  the  new  pivot  between:  P,  _  ,  P,  _  and  P„  ,  ' 

1  3  +  F,  7  v  13 

In  our  case  it  is  P,  r  ,  then  one  has  to  compute  P  ,  which  results  To  be: 

I  +  r  ^  I 

P,  =  0.0218357  (System  good) 


Therefore: 


P:  =  0.0218357 
PF1  =  0.0039756 


1  x  0.0039756  =  0.0037605 


(System  failed) 


x  0.0039756  =  0.0002169 


The  new  evaluated  probabilities  are: 

PQ  =  0.919685  ♦  0.0218357  =  0.9615207 


Pp  =  0.0376051  +  0.0037605  =  0.0613656 


PF*PG 


0.9828863 


and  the  maximum  truncation  error  is: 

0.0171137 

Again  one  has  to  decide  if  the  above  maximum  error  is  acceptable  or  not;  in  case  it  is  not  the  pivot  has  to  be  identified 
among:  Pj  +  p3,p5W1,p7  +  u. 

It  is  P  j  t  p  y  then  a  new  evaluation  step  is  started,  giving: 


Pj  =  0.0123955 
PF3  =  0.0023537 

P8  +  14  =  — »PF,  0.0002139 
“  *  3850  f  5 

Pq  *  e  =  xP  =  0.0021398 

y  *  lacn  r  y 


(System  good) 


(System  failed) 


PQ  =  0.9615207  ♦  0.0123955  =  0.9539162 
Pp  =  0.0613656  ♦  0.0021398  a  0,0635056 
Pp  .  PQ  =  0.9976216 

maximum  error  =  1  -  (Pp  »  PG)  s  0.0025786 

If  the  above  is  still  not  acceptable,  one  notice  that  tlie  new  pivot  among: 
P5  ♦  U,P7  ♦  13'  P8  ♦  16'  '*  P7  ♦  13' 
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Then: 

P-j  =  0.0019339  (System  good) 

P13  =  0.000215  (System  failed) 

P„  =  0.9539162  ♦  0.0019339  =  0.9558501 
PJ*3  =  0.0435054  ♦  0.000215  =  0.0437204 

P_  ♦  P„  =  0.9995705 

Maximum  error  =  0.0004295 

The  above  procedure  may  be  continued  by  considering  Pj  +  ^  and  Pg  f 

Of  course  the  above  is  only  an  example,  which  has  been  selected  to  allow  hand  computations. 

4.  CONCLUSIONS 

The  present  paper  has  pointed  out  the  peculiar  properties  of  the  microstate  concept,  and  of  the  consequent  dynamic 
tree  structure,  as  alternative  to  the  classical  macrostate  approach. 

The  resulting  method  has  to  be  considered  as  a  further  tool  to  evaluate  the  system  reliability  characteristics,  it  is 
particularly  important  in  case  of  trajectory  dependent  behaviours. 

A  computing  procedure  has  been  proposed,  which  shows  that,  despite  the  number  of  rnicrostates,  in  general  infinite,  a 
truncated  analysis  can  be  performed  to  the  desired  degree  of  approximation. 
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THE  EVOLUTIVE  STATE: 


A  MEW  DEFINITION  OF  SYSTEM  STATE  TO  INCLUDE  SEQUENCING  OF  EVENTS 

LET  US  START  WITH  THE  FOLLOWING  EXAMPLE: 


B:  INITIALLY  OPERATING  ITEM 

C:  COID  STAND-BY  REDUNDANCY  OF  B 

A:  SWITCHING  FUNCTION.  IF  A  FAILS  IT  REMAINS  IN  THE  POSITION  OCCUPIED 

BEFORE  FAILURE 


THEREFORE:  (0  -  GOOD.  1  =  FAILED) 

A  FAILS  BEFORE  B 


A 

B 

C 

SYSTEM 

1 

1 

0 

0  - 

1 

I 

1 

0 

A  FAILS  AFTER  B 


A 

B 

C 

SYSTEM 

1 

1 

0 

1 - 

1 

1 

1 

0 

^  THE  OPERATING  CONDITIONS  OF  THE 
COMPONENTS  U.E.  THE  CLASSICAL 
SYSTEM  STATE)  ARE  IDENTICAL,  BUT 
THE  SYSTEM  IS  IN  DIFFERENT  OPE¬ 
RATING  CONDITIONS, 

J 


THE  CLASSICAL  RELIABILITY  DESCRIPTION  USES  THE  CONCEPT  OF  STATE: 

STATE-  OPERATING  CONDITION  Of  THE  COMPONENTS 

«  » 

IS  THIS  SUFFICIENT  TO  COMPLETELY  CHARACTERIZE  THE  SYSTEM? 

TO  ANSWER  THIS  QUESTION  LET  US  CONSIDER  THE  EXAMPLE  AND  THE  FOLLOWING  SITUATION 
A  AND  B  FAILED 

IS  THE  SYSTEM  FAILED  OR  NOT? 

1)  IF  B  FAILS  AFTER  A,  THE  SWITCH  CANNOT  ACTIVATE  THE  REDUNDANT  BLOCK  — 
SYSTEM  IS  FAILED 

2)  IF  A  FAILS  AFTER  B.  THE  SYSTEM  IS  GOOD  OR  NOT  IS  SO  IS  THE  ITFM  C. 
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IN  GENERAL  : 


THERE  ARE  SITUATIONS.  WHICH  ARE  NOT  FULLY  DESCRIBED  BY  THE  OPERATING  CONDI¬ 
TIONS. 

RATHER  THEY  REQUEST  THE  SEQUENCING  OF  EVENTS  TO  BE  COMPLETELY  EVALUATED. 

I 

EVOLUTIVE  STATE  = 

INFORMATION  CONTENT  OF  THE  CLASSICAL  STATE  (I.E.  OPERATING  CONDITION  OF  THE 
COMPONENTS)  ^ 

SEQUENCING  OF  EVENTS  LEADING  TO  IT 

CLASSICAL  STATE  =  MACROSTATE 
EVOLUTIVE  STATE  =  MICROSTATE 

THE  SET  OF  THE  MACROSTATES  IS  A  PARTITION  OF  THE  SET  OF  MICROSTATES. 


WITH  REFERENCE  TO  THE  EXAMPLE 


CLASSICAL  TRANSITION  DIAGRAM 


GOOD  FAILED 


DYNAMIC  TREE 
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PARTITION  OF  THE  SET  QF  MICROSTATES 

50  ~  {so} 

51  -  {sl} 

52  **  {s2  } 

53  -  {S4 '  se) 

54  «  {s3| 

55  ~  {s5‘  s8} 

56  **  {s7‘  s9} 

57  **  {s10'  *11'  s12#  s13'  S1R'  s15  } 

IN  6ENERAL 

FOR  A  SYSTEM  OF  ORDER  N.  THE  MICROSTATE  TRANSITION  DIAGRAM  IS  AN  N-ARY  TREE 

NODES  =»  MICROSTATES 
BRANCHES  =»  TRANSITIONS 

LEVEL  0 
LEVEL  1 

LEVEL  2 
LEVEL  3 
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LET  US  CONSIDER  THE  GENERAL  H1CROSTATE  S,s 

P,(t+  at)  »  II  -  (2x  ) ,  at]  P,(t)  +  x  ,  P  ,(t)  at 

1  I  I  I  si  J 

WHERE: 

P,(t)  probability  that  the  system  is  in  the  microstate  s,  at  THE  TIME  t 
(lx),-  cumulative  transition  rate  going  out  from  s, 

x, .  -  TRANSITION  RATE  FROM  S  ,  TO  S, 

IJ  J  I 

at  -  TIME  INTERVAL 

FROM  THE  ABOVE  EQUATION: 

P,(t)  -  -<JX  ),  P,  (t)  ♦  xu  Pj  (T) 


IN  PARTICULAR  : 

ESU. 

P0(t) 

IF  (AS  USUAL)  PQ(o) 


’  <**>„  p0  (T) 


Pq(t) 


FOR  S,  (MICROSTATE  OF  LEVEL  1): 

Pj(T)  -  -(ZX  )j  Pj(t)  ♦  x{  Q  E 


FROM  WHICH  P[(t)  IS  DERIVED.  TO  BE  USED  TO  FIND  Pj, 


-Uxy 


(^x)ot 
(t).  AND  SO  ON. 
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THEOREM  (FUNDAMENTAL) 


CONCLUSION 


WHY  HICROSTATES? 

THERE  ARE  SYSTEM  CHARACTERIZATIONS  WHICH  DEPEND  ON  SEQUENCE  OF  EVENTS 
E.G.  COST 

EACH  MICROSTATE  CAN  BE  ASSIGNED 
A  COST  —  Cj 

A  PROBABILITY  AT  T  — P 
AVERAGE  COST  AT  T  -  £  p  c, 

I  • 
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OPTIMISATION  DES  SPECIFICATIONS  D  UN  SYSTEME  AIR-SURFACE  LASER 


par 

Jean-Pierre  MURGUE 
THOMSON- CSF  Qiv . AVS/D6p .AVG 
52, rue  Guynemer 

92132  -  ISSY  LES  MOULINEAUX  (FRANCE) 
et 

Didier  EVRARD 
MATRA  -  Sectaur  Militaire 
37,  Avenua  Louis  BrAguet 
78140  -  VELIZY  (FRANCE) 


RAaumA 


Les  specifications  d'un  systAme  d'armes  doivent  bien  cerner  les  besoins  des  Etats 
Majors,  afin  de  les  satisfaire  dans  les  meilleures  conditions  de  co0t-efficacit6. 

Cette  presentation  donne  un  exemple  des  etudes  prealables  qui  ont  et§  n6cessaires 
pour  specifier  un  systAme  d'attaque  Air-Surface  A  guidage  laser. 

Elle  porte  sur  un  cas  opera tionnel  particulier  trfes  dimensionnant  qui  est  l'attaque 
des  vedettes  lance-missiles  A  la  mer. 

Elle  montre  que  le  bombardement  est  une  solution  economique  et  qu'il  e3t  possible 
d'optimiser  en  codt-eff icacite  la  definition  de  la  nacelle  de  designation  laser  pour  le 
bombardement  qui  demande  un  dCbattement  important  de  la  ligne  de  visee  vers  l'arrifere, 
et  celle  du  guidage  de  la  bombe  qui  doit  rester  A  trAs  basse  altitude  pour  satisfaire 
aux  conditions  meteorologiques  envisagees,  et  Stre  suffisamment  precise  pour  atteindre  des 
cibles  aussi  petites  et  rapides . 


I  -  PREAMBULE 

Les  premieres  arises  A  guidage  laser  ont  fait  leur  apparition  en  operation  au  debut 
des  annees  70. 

DA s  1972,  au  Vietnam,  les  excellents  resultats  obtenus  avec  les  bombes  guidees  laser 
PAWEWAY  demontr6rent  largement  la  validite  des  etudes  de  cout-eff icacite  sur  lesquelles 
s'appuyait  le  developpement  de  ces  armes  et  qui  avaient  mis  en  evidence  les  gains  trAs 
importants  que  I'on  pouvait  obtenir  avec  ce  type  d'armement  par  rapport  aux  charges  ana¬ 
logues  non  munies  de  guidage,  m£me  larguAes  de  fagon  trSs  precise  par  les  calculateurs 
des  avions  modernes  sur  des  objectifs  terrestres  fixes. 

La  confiance  raise  depuis  dans  le  guidage  laser  par  les  Etats  Majors  et  1' evolution 
des  technologies  optroniques  ont  conduit  A  repenser  ce  concept  pour  1' adapter  6galement 
A  l'attaque  des  objectifs  terrestres  de  dimensions  rAduites,  et  aux  objectifs  marins  mo¬ 
biles. 

C'est  alnsl  qu'a  At6  AtudiB  et  optimise  le  systAme  d'armement  guide  laser  frangais 
utilisant  1 ' illuminateur  ATLIS  de  la  Societe  THOMSON-CSF,  l'ongin  AS  30  laser  de  la  So- 
ciete  AEROSPATIALE  et  les  bombes  guidAes  laser  de  la  SociAtA  MATRA. 

Cette  presentation  porte,  parmi  les  etudes  prAalables  de  coQt-ef ficacitA  qui  ont  con¬ 
duit  aux  specifications  de  ce  systAme,  sur  un  cas  opArationnel  trAs  dimensionnant  intAressant 
la  Marine  :  l'attaque  de  vedettes  lance-missiles. 

On  verra  ainsi  comment  ont  AtA  optimtsAes  certaines  caractOristiques  de  la  nacelle 
ATLIS  et  la  dAflnltion  de  la  bombe  MATRA,  A  propos  de  laquelle  nous  nous  limiterons  au 
kit  de  guidage.  En  effet,  le  Symposium  n'Atant  pas  classifiA,  nous  ne  pourrons  pas  tr, al¬ 
ter  des  travaux  concernant  les  charges  militaires,  qui,  bien  Avldcmment,  ont  AtA  conduits 
parallAlement  par  la  SociAtA  MATRA  pour  optiraiser  l'arme  dans  son  ensemble.  Nous  devour, 
Agalement  renoncer  A  clter  de3  informations  S  caractAre  con f i dent i el ,  ce  qui  nous  condui- 
ra  le  plus  souvent  A  presenter  nos  rAsultats  sous  forme  qualitative. 

AprAs  avoir  rappelA  rapldemcnt  le  concept  du  systAme  d'armement  guide  laser  frangair, 
nous  vous  prCsenterons  l'exemple  de  nos  travaux  choisls  pour  cet  expose,  en  suivant  le 
plan  cl-aprAs  : 

-  Description  de  la  prise  en  compte  : 

.  la  dole  et  non  envi  ronnement  taollqn,-, 

.  les  eomli  I  ioiei  niA I  Aorn log  i  quen  , 

.  1  e  !(f -  f'l 1 ,1  lie  d  *  at  i  agile  , 

.  1  ••  cluil  x  dn  i  ype  il'aimes, 
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•  les  caract.yristiques  de  la  nacelle 
.  le  cholx  des  principes  de  guldage  des  antes. 
Enfin,  nous  conclurons  sur  l'utilitl  de  ces  tcavaux  prCllmlnalres . 

II  -  SYSTEMS  D'ARMEMENT  GUIDE  LASER  FRANCAIS 


Ce  systSme  est  un  systSme  d'attaque  Air-Surface  pour  avion  monoplace,  constitug  par  : 

-  la  nacelle  de  designation  laser  alroportle  ATLIS  rSalisSe  par  THOMSON-CSF, 

-  des  armes  3  guidage  laser  de  deux  types  : 

.  Missile  AS  30  Laser  de  1 ' AEROSPATIALE  avec  Autodirecteur  Laser  ARIEL  de 
THOMSON-CSF, 

.  Bombes  guidSes  laser  B  GL  de  MATRA  avec  dStecteur-fecartomStre  laser  de 
THOMSON-CSF . 

Ce  systems  est  aujourd'hui  enti§rement  dlveloppfi  et  opSrationnel . 

La  nacelle  comporte  un  systSme  "television  et  laser"  de  haute  performance,  dont  la 
ligne  de  visee  est  capable  d'un  grand  debattement  ne  laissant  qu'un  faible  cdne  aveugle 
vers  l'arriere.  Sa  television,  qui  travaille  aussi  bien  dans  la  bande  visuelle  que  dans 
le  proche  infrarouge,  permet  au  pilote  de  detecter  et  de  reconnaltre  sa  cible  3  des  dis¬ 
tances  nettement  supdrieures  3  celles  obtenues  3  l'oeil  nu.  II  ddclenche  alors  la  pour- 
suite  television  du  point  vise  sur  la  cible.  Le  laser  sert  alors  3  la  teiemetrie  pour 
calculer  l'entrle  dans  le  domaine  de  tir  de  l'arme  qui  peut  Stre  tirSe  aussitdt. 

DSs  le  tir,  le  pilote  degage  un  virage  serrS  pendant  que  la  poursuite  maintient  la 
ligne  de  visee  de  la  nacelle  sur  la  cible.  En  temps  utile  pour  le  guldage  final  de  l'arme  , 
1* illumination  laser  est  dedenchee  automatiquement,  crSant  sur  le  point  vl :.t  une  tache 
laser  que  1 'Autodirecteur  detecte,  reconnait  et  poursuit  pour  le  guidage  de  l'arme. 

On  obtient  ainsi  une  trSs  grande  precision  3  1' impact  qui  peut,  grSce  3  la  televi¬ 
sion,  Stre  observee  par  le  pilote  et  enregistree  pour  le  compte-rendu  de  l'attaque. 

II  faut  noter  qu'il  est  possible  egalement  de  repartir  les  fonctions  de  designation 
et  celles  de  tir  entre  plusieurs  avions,  les  uns  porteurs  de  nacelles,  les  autnes  porteurs 
d* armes. 


Ill  -  DESCRIPTION  DK  LA  MISSION  PRISE  EM  COMPTK 

Parmi  les  missions  nouvelles  int6ressant  les  Etats-Majors ,  nous  avons  done  retenu 
pour  cette  etude,  le  cas  tris  dimensionnant  de  l'attaque  de  vedettes  lance-missiles. 

III-l.  La  cible  et  son  envlronnement  tactlque. 

La  cible  etait  un  bltiment  de  type  OSA  nnavigant  3  grande  vitesse,  isoie  ou 
en  groupe,  mais  dans  des  dispositifs  suf fisamment  disperses  pour  que  dans 
chaque  passe  une  seule  vedette  soit  3  prendre  en  compte. 

Ses  caractdristiques  maximales  de  manoeuvrability  et  de  vitesse  selon  le  vent 
et  la  mer  ainsi  que  ses  defenses  3taient,bien  sflr,  dgfinies  de  fa;on  prospec¬ 
tive  et  classifies. 

III-2.  Les  conditions  ml tlorologlgues . 

A  partir  des  th#Stres  d'opfirations  envisages,  les  conditions  m£t£orologiques 
susceptibles  d'etre  rencontrfees  dans  cette  mission  purent  Stre  apprSciSes. 


CONDITIONS  IIITIO  WEATHER  CONDITIONS 

VISIBILITI  PLAFOND  VINT 

NVR  CEILINQ  WIND 


La  figure  1  montre  des  exem- 
ples  des  rSsultats  statisti- 
ques  utllisSs.  Ils  concernent 
la  visibility,  le  plafond  et 
le  vent. 


Nous  avons  pris  comme  condi¬ 
tions  nominales  les  limites 
correspondent  3  une  probabi- 
lit6  de  90  %  ,  soit,  selon  les 
zones  : 

-  de  33  8,2  km  pour  la  vi¬ 
sibility, 

-  de  180  3  plus  de  1000  metres 
pour  le  plafond, 

-  et  de  1  'ordre  do  20 
poor  lo  vent. 
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Les  donnSes  sur  la  cible  et  son  environnement  conduisaient  aux  conclusions 
suivantes  sur  le  scenario  d'attaque  avec  guidage  laser,  dans  le  cas  princi¬ 
pal  retenu  par  la  Marine,  c'est-3-dire  avec  1' avion  tireur  assurant  lui-mSme 
la  designation  laser  (Figure  2)  : 


SCENARIO  D'ATTAOUe  ATTACK  SCCMAKIO 
®  BONNES  CONDITIONS  METEO 


FIGURE  2 


1/  Quand  les  conditions  meteo- 
rologlques  le  permettent.l'at- 
taque  sera  faite  3  1* altitude 
la  plus  favorable,  3  distance 
de  security. 

2/  Par  plafond  bas,  l’attaque 
devra  Stre  effectu6e  sous  le 
plafond,  depuis  1 'acquisition 
jusqu'3  1' impact  de  l'arme, 
pour  assurer  1 ' illumination  de 
la  cible  et  l'arme  devra,  elle 
aussi,  voler  sous  le  plafond 
pour  rester  dans  des  conditions 
de  propagation  atmosphfirique 
lui  permettant  d'acquferir pour 
son  guidage  terminal  la  tache 
laser  sur  la  cible. 

3/  Par  mauvaise  visibility, 

1' avion  pourra  avoir  3  penetrer 
dans  le  volume  battu  par  les 
defenses  de  l'ennemi.  La  duree 
de  cette  penetration  devra 
Stre  aussi  courte  que  possible. 


IV  -  LE  CHOIX  DU  TYPE  D ' ARME 


Ces  contraintes  operationnelles  permettaient  de  degager  deux  premieres  specifica¬ 
tions  pour  l'arme  : 

1)  Sa  portee  devra  Stre  suffisante  pour  assurer  le  passage  3  distance  de  security. 

2)  Pour  couvrir  le  cas  du  plafond  bas,  elle  devra  pouvoir  Stre  tir6e  et  guid6e  3 
trSs  basse  altitude. 

Ces  specifications  etaient  compatibles  d'une  bombe  guidee  capable,  Sans  propulsion, 
d'un  vol  3  trSs  basse  altitude  3  la  portee  requise,  et  certainement  moins  ch6re  qu'un 
missile . 

Un  tel  choix  conduisait  3  traiter  en  terme  de  coQt-ef f icacite  les  specifications  de 
la  nacelle  et  de  la  bombe,  en  particulier  les  deux  problSmes  suivants  : 

-  capacity  de  d6battement  de  la  ligne  de  vis6e  de  la  nacelle  de  designation, 

-  princlpe  de  guidage-pilotage  de  la  bombe. 


V  -  LES  CARACTERISTIQUES  DE  LA  NACELLE. 

DEBATTEMENT  MAXIMAL  DE  LA  LIQNE  DE  VISEE 
DE  LA  NACELLE 

POO  UMe  OF  SIGHT  MAXIMUM  LOOK  BACK  AHOLK 

DEBATTEMENT  IMPORTANT  PLUS  FAIBLE 

LOOK  BACK  ANQLf  LAKOC  SMALLKB 


On  voit  sur  la  figure  3  que  plus 
le  debattemcnt  maximal  (  o<  )  de  la  ligne 
de  vis6e  est  grand,  moins  sera  limi- 
tee  Involution  (  )  de  l'avlonau  J6- 

gagement  aprSs  tir  pour  assurer  la 
designation  laser  jusqu'3  l'impact  de 
la  bombe,  et  plus  courte  sera  laduree 
de  1 'exposition  (t)  au  feu  ennemi 
lorsque  la  visibility  meteorologlguo 
oblige  3  tirer  3  courte  portee  et  3 
pAnetrcr  dans  lo  volume  dangereux. 

L'anglc  (P)  do  rotation  de  la 
ligne  do  vis6e  entre  le  tir  et  l'im¬ 
pact  sera  aussi  moins  ouvert  i  il  ost 
en  effct  souhaltable  que  cet  angle  no 
solt  pas  trop  flove  pour  ijue  l'<jnerglo 
laser  rcnvoyOo  par  la  cible  vers  l'armo 
restc  suffisante. 

Mats  1 '  augmentation  de  l 'angle  ( <X  ) 
qul,  idealeiuont  dovralt  Ctre  de  lltn  , 
pout  r, iflt  o r  olio t  . 
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II  a  EtS  nEcessaire  d'Evaluer  la  valeur  optimale  de  cet  angle  en  rapport  coQt/effi- 
cacitE. 


La  figure  4  montre  quelques  rEsultats  des  simulations  pour  des  bombardements  a  courts 
portEe  correspondant  aux  faibles  visibilitEs  avec  pSnEtration  dans  la  zone  battue  par  les 

defenses  ennemies.  Ils  montrent 
qu'il  est  particul idreraent  impor¬ 
tant  d'augmenter  1* angle  ot  jusqu'3 
des  valeurs  proches  de  180°,  mais 
que  la  sensibility  des  paramEtres 
d'efficacitE  opE rationnelle ,  tels 
que  t  et  f ,  a  cette  augmentation 
s'annule  pratiquement  au  deia  de 
165°. 


OPTIMISATION  00  DEBATTEMENT 
LOOK  SACK  ANCLE  OPTIMIZATION 


EPFICACITE 

effectiveness 


COOT 

COST 


POTATION  01  LA  UV  TIMI S'SVOSITIOM  PNOJCT  INITIAL 


FIGURE  4 


II  nous  a  Ete  facile  de  conclure 
sur  ce  problSme  quand  1' Etude  de 
coQt  nous  a  montrE  qu'une  modifi¬ 
cation  de  la  nacelle  initiale  pour 
atteindre  un  angle  de  cet  ordre 
conduirait  3  une  augmentation  de 
10  %  du  coQt,  en  apportant  une  di¬ 
minution  du  temps  d'exposition  de 
1' avion  de  20  % ,  alors  qu'une  mo¬ 
dification  pour  un  angle  supErieur 
obligerait  3  changer  complEtement 
le  concept,  avec  Evidemraent  une 
augmentation  trSs  importante  duooQt, 
sans  pour  cela  diminuer  davantage 
le  risque  d'attrition. 


VI  -  CHOIX  DES  PRINCIPES  DE  GUIDAGE  DES  BOMBES 


VI- 1.  Specifications  opEratlonnelles  des  bombes  guldEes  MATRA 

Les  spEcifications  opErationnelles  des  Etats  Majors  assignaient  aux  systEmes 
de  guidage  LASER  MATRA  deux  objectifs  essentiels  : 

-  des  objectifs  terrestres  iromobiles  de  dimensions  rEduites, 

-  des  objectifs  maritimes,  et  plus  partlculiErement,  des  vedettes  lance-mis¬ 
siles  du  type  OSA  n ,  dont  la  description  a  EtE  faite  prEc^demment. 

II  est  apparu  trSs  vlte  que  ce  dernier  object! f  ytait  le  plus  difficile  5  traiter 
tant  par  ses  dimensions  trEs  ryduites  sous  certaines  prEsentations , que  par  sa  vit esse. 

Une  ytude  comparative  en  termes  de  coQt-ef ficacity  a  etE  entreprise  au  dybut 
du  dyveloppement  afin  de  dEterminer  la  loi  de  guidage  la  mieux  appropriEe,  compte- 
tenu  Egalement  de  la  charge  militaire  qui  reprEsente,  dans  ce  type  d'armement,  plus 
de  75  %  de  la  ma3se  totale. 

Cette  6tude  a  permis  de  dEfinir  une  solution  originale,  ayant  un  trSs  bon  rap¬ 
port  coQt-efficacitE . 

VI- 2.  Description  de  la  trajectolre 

La  trajectolre  d'une  arme  a  guidage  LASER 
tituEe  de  deux  phases  : 

-  une  phase  de  prEguidage,  entre  le  point  de  largage  et  1' instant  oil  le  dEtec- 
teur  laser  peut  accrocher  la  cible, 

-  une  phase  autoguidEe  depuls  l'accrochage  jusqu'3  1' impact. 

La  phase  de  prEguidage  dolt  pouvoir  se  dEroulcr  : 

-  S  trSs  basse  altitude  lorsque  le  plafond  nuageux  1 'impose, 

-  S  plus  haute  altitude  lorsqu'un  angle  d' Impact  final  ElevE  est  recherchE  et 
quo  le 8  conditions  mEtEorologlques  et  1 'envi ronnomcn t  tactique  de  la  cible 
le  permettent. 

Le  guidage  terminal,  quant  3  lui,  doit  assuror  3  l’armo  une  prEcision  suffi- 
sante  pour  atteindre  la  cible. 

Seulc  1 'Etude  relative  3  la  oomposante  latErale  do  la  distance  de  passage  sort 
exposEo  lcl . 


I 
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VI-3.  Analyse  de  la  precision  reguise 


La  vedette  lance-missiles  est  un  exemple  de  cible  de  dimensions  relativement 
importantes ,  mais  animge  d'une  vitesse  eiev6e. 

Elle  peut  se  presenter  3  l'arme  (voir  Figure  5,  ci-dessous)  : 

-  par  le  travers, 

-  par  l'avant  ou  l'arrigre 

-  ou  dans  une  position  intermediaire  caracterisge  par  l'angle  & 
entre  sa  vitesse  et  la  trajectoire  de  la  bombe . 


Dans  le  premier  cas  la  composante  perpendiculaire  a  la  trajectoire  de  la  bombe 
de  la  vitesse  de  la  cible,  (VY) ,  est  maximale  et  la  vitesse  du  vent  suivant  le  mem: 
axe  (MY)  peut  s'y  ajouter  s'il  est  de  face.  Le  vent  sur  le  pont  (VY  +  WY)  ne  peut 
cependant  qu ' exceptlonnellement  dgpaaser  45  noeuds.  Mais,  dans  ce  cas,  la  largeur 
apparente  de  la  cible  est  maximale  et  si  la  tache  laser  est  supposfie  au  milieu  du 
bateau,  la  bombe  peut  6ventuellement  faire  une  distance  de  passage  non  nulle  tout 
en  d&truisant  l'objectif  grSce  3  sa  charge  militaire  trSs  efficace. 

En  presentation  avant  ou  arrifire,  la  vitesse  transversale  de  la  cible  est  nulle 
mils  sa  largeur  apparente  est  minimale.  La  vitesse  maximale  du  vent  consideree  est 
de  20  noeuds . 

Entre  ces  deux  presentations  extremes,  toute  situation  intermediaire  doit  etre 
envisag6e  car,  pendant  le  vol  de  l'arme,  le  bateau  a  tout  loisir  de  manoeuvrer  pour 
6ventuellement  rechercher  la  presentation  la  plus  favorable  pour  lui. 

Le  trace  des  largeurs  (figure  6)  et  vitesses  transversales  apparentes  (figure 
7)de  la  cible  permet  d'gvaluer  la  distance  de  passage  maximale  pour  faire  impact 
(figure  8)  . 


La  distance  de  passage  maxtmaie  admissible  par  rapport  3  la  tache  laser  est 
done  la  dcml-largeur  du  bateau  jtistju'A  20  noeuds,  puts  cetto  distance  augmente. 
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VI-4.  Definition  de  la  loi  d'autoquldaqe 

Les  objectifs  de  precision  6 tint  etablls,  11  s'aglssait  de  determiner  la  loi 
de  guidage  la  mellleure  en  termes  de  rapport  coQt/ef ficacite,  l'efflcacite  etant  d§- 
flnle  coimne  la  probablllte  de  falre  inpact,  quel  que  solt  le  point  du  bateau. 

Deux  types  de  lol  peuvent  6tre  envisages  pour  cette  arme  : 

-  une  lol  de  poursuite  n6cessitant  un  minimum  d' 6quipements  et  en  particulier 
un  detecteur  laser  3  faible  coQt, 

-  une  loi  de  navigation  proportionnelle ,  pure  ou  mixte  et  ponderee  par  des 
termes  de  poursuite,  n6cessitant  des  Equipements  plus  complexes  :  autodi- 
recteur  3  t6te  gyrsocopique  par  exemple. 


COMPARAISON  OES  LOIS  Of  QUIOAQE  TERMINAL 

TERMINAL  GUIDANCE  LAWS  COMPARISON 


distance  de  passage 
MISS  DISTANCE 


La  premiere  solution,  tres 
6conomique , ne  repond  malheu- 
reusement  pas  a u  probldmecar 
elle  induit  une  distance  de 
passage,  proportionnelle  en 
premiere  approximation  3  la 
vitesse  de  la  cible,  la  si¬ 
tuation  se  degradant  m6me 
encore  3  grande  vitesse  3 
cause  des  saturations  d’or- 
dre  a6rodynamique . 


La  deuxieme  solution,  utili- 
sant  un  autodirecteur  3  tSte 
gyroscopique  anSne  3  un  surooQt 
de  50  %  sur  le  systeme  de 
guidage .  Elle  repond  du  point 
de  vue  precision  au  probiemc 
mais  n'utllise  pas  les  carac 
tEristiques  dimensionnelles 
de  la  cible  et  elle  est  done 
3  la  limite ,  inutilement  chSre. 


FIGURE  9 


Spmo  IKTSl 


MATRA  a  done  recherche  une 
solution  intermediaire ,  mieux 
adaptee  aux  specifications 
de  precision,  qui  a  consiste 

3  ameiiorer  de  fagon  simple  les  detecteurs  adaptes  aux  lois  de  poursuite  afin  de  pou- 
volr  compenser  la  fraction  de  la  vitesse  apparente  de  la  cible  correspondent  au  vent. 


Cette  amelioration  est  d'ailleurs  6galement  n6cessaire  pour  les  abiectifs  terres- 
tres  de  faibles  dimensions.  Le  surcoQt  entraln6  par  cette  solution  est  beaucoup  plus 
faible  que  pour  la  solution  precedente  s  environ  10  %. 


Ce  rapport  etant  non  classifie,  nous  ne  pourrons  donner  que  les  principes  de  la 
solution  adoptee. 

Les  detecteurs  utilises  dans  les  bombes  guid§es  MATRA  sent  : 


-  un  6cartomStre  laser,  monte  sur  girouette  aErodynamique , 

-  un  gyroscope  de  roulis,  assurant  une  reference  de  verticale. 

Le  pilote  est  un  piiote  2  axes  :  roulis  et  tangage. 

La  loi  de  guidage  est  une  loi  de  poursuite  avec  : 

-  compensation  de  la  pesanteur, 

-  compensation  de  la  vitesse  transverse  de  la  cible. 

Ceci  est  realise  grSce  au  gyroscope  de  verticale  et  3  1 ' EcartomAtre  Laser  qui 
a  ete  rendu  3  cet  effet  plus  performant,  avec  des  caracteri s t i ques  de  linEarite  tres 
bonnes  et  une  grande  precision,  sans  toutefois  attelndre  la  complexitE  de  1 'autodi¬ 
recteur.  Le  gyroscope  de  verticale,  quant  3  lui,  etait  dxj3  nPcessalre  pour  le  pr£- 
guidage  3  tr3s  basse  altitude. 


Avec  cette  loi  de  guidage, la  distance  d"  passage  rente  faible  pour  une  viler.:. •• 
de  cible  lnf§rieure  3  20  nocuds. 

Au  del3,  elle  crolt  cominc  avec  une  lui  d"  pour3tilLi  main  reste  compatible  do  ]i 
cible  envisagfe. 

Ainsl,  en  utllisant  une  lol  d'uno  effieacltf-  volr.lne  tie  cello  procurEe  par  la 
navigation  proportionnelle  gfuihralement  prAronlr.Eo  pout  tr.it  lei'  une  cible  mobile, 
nous  avona  pu  rEduire  notablement  le  coQt  du  systAme  do  guidage  et  done  rfullsct  une 
v6ritab!o  etude  d'optlmlsatlon  en  termer,  de  roflt /ef  f  I  caei  ( . 

Les  nombreux  essals  en  vol  effectuAs  par  ce  systAm..  rnl  pemds  de  coniine,  la 
validity  de  la  solution  retom, e  et  montrft  une  ptAelsion  trAs  hnimc  de  1  'ensemi-le  pu- 
faltemont  compatible  de  boh  objectifs  npAr.itlimne  I  „ . 
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VII  -  CONLCLUSION 


Nous  avons  voulu  montrer  ici  l'intferSt  et  la  nScessit§  d'etudes  &  caract6res  tedmioo- 
opSrationnels  pour  aboutir  3  une  definition  coh6rente  et  optimale  en  coQt/ef f icacite  d’un 
systems  coraplexe  tel  que  celui  de  l'armement  quid®  LASER  frangais,  avec  sa  nacelle  et  ses 

armements . 

Dans  les  cas  particuliers  considers,  les  solutions  les  plus  performantes  od  les 
plus  complexes  se  sont  avSrSes  inutilement  chSres. 

II  a  6t6  ainsi  possible  d'orienter  la  definition  de  la  bombe  vers  cbs  solutions  sim¬ 
ples  mais  suffisantes  pour  les  missions  assignees  et  d’adapter  celle  de  la  nacelle  en  op- 
timisant  son  rapport  Coflt/Efficacite . 
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UNITED  STATES 
SUMMARY 

In  response  to  the  continual  exponential  growth  in  the  complexity  and  cost  ot 
military  weapon  systems,  especially  the  electronics  portions,  the  United  State:’ 
Department  of  Defense  has  implemented  a  ”Design-to-Cost"  ( DTC )  procurement  policy. 
The  objective  of  this  policy  is  to  meet  ESSENTIAL  and  DESIRED  operational 
requirements  in  the  most  cost  effective  manner  by  setting  cost  targets  at  the  start 
of  the  procurement  process. 

A  methodology  is  described  for  developing  electronic  equipment  to  meet  DTC  require¬ 
ments.  Specific  management  action  is  required  in  establishing  an  appropriate  organi¬ 
zation  as  well  as  procedures  and  guidelines  for  the  engineering  development  process 
and  subsequent  production  to  achieve  the  cost  targets.  The  critical  role  of  computer 
aided  design  in  optimizing  the  electronic  system  design  is  highlighted. 

An  example  of  a  DTC  program  successfully  applied  to  the  Lightweight  Doppler 
Navigation  System  (LDNS)  AN/APN-128  is  reviewed. 

1.  INTRODUCTION 

The  ever  increasing  demand  for  more  sophisticated  avionics  for  advanced  manned  *  no 
unmanned  airreraft  demands  the  use  of  a  disciplined  design  and  production  engineer::-.'., 
approach  to  assure  that  all  essential  mission  requirements  are  being  achieved  for  the 
lowest  Life  Cycle  Cost  (LCC) . 

U.S.  Department  of  Defense  procedures  (Reference  1)  for  the  acquisition  of  military 
equipment  direct  that  procurement  of  new  equipment  must  achieve  a  cost  effective 
balance  among  acquisition  costs,  ownership  costs  and  system  effectiveness.  Theft 
requirements  mandate  an  approach  to  the  development  of  new  hardware  which  require: 
careful  trade-offs  among  factors  affecting  performance  and  cost.  Cost  has  always 
been  a  consideration,  but  as  requirements  essalate,  it  becomes  a  primary  design 
parameter  which  ranks  equally  with  performance.  In  recognition  of  the  need  tr< 
contain  the  cost  of  new  hardware,  the  military  customer  has  implemented  a  w 
acquisition  technique,  namely,  the  Design-to-Uni t  Production  Cost  (DTUPC)  or  Design* 
to-Cost  (DTC)  Procurement.  This  type  of  procurement  is  characterized  by  the 
fol lowing : 

unit  production  cost  must  become  a  primary  design  parameter 

essential  performance  criteria,  unit  acquisition  and  ownership  costs  must- 
receive  equal  consideration 

realistic  unit  cost  goals  must  be  established  that-  are  achievable  and  affordable 

the  best  possible  design  to  perfoim  the  mission  must  be  obtained  for  the  estab¬ 
lished  unit  cost  goal. 

This  paper  describes  procedures  for  implementing  the  DTC  concepts  that  were  artived 
at  during  the  development  of  the  AN/ASN-128  Lightweight  Doppler  Navigation  System  row 
in  production  for  the  U.S.  Army  and  for  military  forces  of  several  other  nations.  It 
was  one  of  several  systems  that  was  designated  by  the  DOD  as  a  "test  bed"  fo- 
evaluating  the  DTC  concept.  The  techniques  described  in  this  paper  should  previe-- 
designers  with  a  proven  methodology  to  optimize  avionic:-'  cost  effectiveness. 


2  .  l)ES  I GN -TO- COST  METHOD!  >  l  .<  h  ;_Y 

The  sections  that  follow  develop  a  suggested  rot  cl  prooedur*  r, ,  t  i  .de-offe  and  do.  * 
mentation  to  be  used  in  implementing  a  DTC  program.  ‘lie:  e  are  di.uuammod  in  Figure 
and  difloussed  below. 

2 . 1  SELECTION  OF  COST  AND  PERFORMANCE  GOALS 

The  DTC  process  starts  with  the  procuring  agency  ev  t .  d>l  i  shi  n«i  a  iiMlistic  oust  g  •> 
for  the  equipment  that  is  to  he  purchased  (Step  \  of  Figure  1).  Typically,  this 

represents  the  amount  the  government  is  willing  to  pay  tor  a  -mil  of  military  eg  op 
went  which  meets  established  and  measurable  per  I  ormance  i  e.  pi  i  t  «-mcnt  s;  at  a  spec  it  > 
production  quantity  and  irte  during  a  iipmufi'd  peiio.i  of  t  1 1  . 
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The  performance  requirements  are  established  by  the  technical  arm  of  the  procuring 
agency,  and  are  divided  into  two  categories:  "ESSENTIAL*  and  "DESIRED".  ESSENTIAL 
requirements  are  those  elements  of  performance  that  must  be  met  if  the  equipment  is 
to  be  useful  in  the  intended  applications  and,  therefore,  cannot  be  traded  off 
against  cost.  DESIRED  requirements  or  features  can  be  sacrificed  by  the  designer  in 
order  to  achieve  the  DTC  goal. 

The  determination  of  cost  and  performance  goals  by  the  procuring  agency  can  be  a 
complex  and  difficult  trade-off  study  in  itself.  The  partitioning  of  the  available 
budget  among  the  elements  of  a  weapon  system  (e.g.,  airframe,  propulsion,  avionics, 
weapons,  etc.)  is  a  possible  first  step  and  must  be  based  on  experience  and  the 
mission  requirements.  This  partitioning  would  have  to  be  tested  against  estimates  of 
the  production  costs  of  these  elements.  Such  estimates  might  be  based  on  extrapola¬ 
tions  of  the  cost  and  performance  history  of  similar  equipments  or  on  a  survey  of 
current  suppliers  to  get  their  projections  for  costs  and  capability  of  "next 
generation"  equipments.  Depending  on  circumstances,  the  procuring  agency  may  use  any 
one  or  a  combination  of  these  techniques  to  arrive  at  the  DTC  cost  goal. 

The  next  step,  the  development  of  ESSENTIAL  and  DESIRED  requirements,  involves  the 
cooperative  participation  of  operational,  developmental  and  logistics  organizations 
within  the  military  agency.  These  organizations  may  be  required  to  make  some 
difficult  decisions  when  establishing  these  requirements  in  order  to  avoid  the 
temptation  of  making  every  requirement  an  ESSENTIAL  one.  Similarly,  if  too  many  of 
the  operational  requirements  are  placed  in  the  DESIRED  category,  there  is  the  danger 
of  the  designer  eliminating  important  features  to  meet  his  cost  goals.  Strong 
technical  and  project  management  control  within  the  customer's  organization  must  be 
exercised  to  achieve  a  realistic  set  of  ESSENTIAL  and  DESIRED  requirements. 

2.2  EQUIPMENT  SUPPLIERS  RESPONSE  TO  THE  DTC  GOALS  (Step  2  of  Figure  1) 

TECHNICAL  -  The  equipment  developer's  activities  should  start  with  a  detailed 
In-depth  review  and  interpretation  by  program  and  technical  management  of  the  cost 
goals  and  performance  specifications.  All  requirements  and  particularly  the 
ESSENTIAL  ones  should  be  discussed  with  the  customer  to  assure  that  they  are  clearly 
understood.  With  the  help  of  the  customer,  priorities  should  be  assigned  to  the 
DESIRED  features  where  possible.  t 

Some  of  the  many  factors  to  be  considered  when  assigning  priorities  are: 

-  DESIRED  features  that  may  become  ESSENTIAL  requirements  in  the  future  when  deve¬ 
lopment  of  related  architecture  and/or  avionics  have  been  completed  should  be 

identified:  for  example,  introduction  of  new  data  bus  interfaces  such  as 

MIL-STD-1553. 

-  some  seemingly  expensive  features  may  become  significantly  less  costly  by  the 
time  production  starts;  for  example,  reduction  in  computer  memory  oosts  as  more 
dense  LSI  memories  become  available.  The  cost  of  RAM  memory  has  decreased  by 
twenty  to  one  over  the  last  10  years. 

-  digital  signal  processing  techniques  involving  microprocessors  and  VLSI/VHSIC 

technology  with  their  vast  potential  for  greater  functional  capability  at  lower 
costs  will  permit  incorporation  of  features  such  as  increased  BITE  and  addi¬ 

tional  system  functions  in  the  near  future  without  impacting  cost  or  size  goals. 

After  completing  the  reviews  of  the  customer's  DTC  goals  and  requirements,  they  are 
then  converted  into  a  set  of  system  requirements  to  be  used  by  the  development 

engineers  in  the  detailed  design  phase.  Later  sections  of  this  paper  discuss  some 
suggested  CAE/CAD  techniques  to  improve  DTC  effectiveness  during  the  design  phase. 

MANAGEMENT  -  For  DTC  to  be  effective,  a  company  must  be  ready  to  set  up  an  organiza¬ 
tion  that  provides  the  functions  required  to  properly  accomplish  the  program  goals. 
A  full  time  DTC  management  function  completely  dedicated  to  implement  and  monitor  the 
DTC  concept  is  required  in  order  to  be  successful  and  not  merely  provide  lip-service 
to  DTC.  Experience  has  shown  that  a  full  time  DTC  manager,  running  an  effective  DTC 
program,  will  more  than  pay  for  that  person.  A  typical  organization  chart  is  shown 
in  Figure  2.  The  DTC  manager  is  shown  sharing  the  Program  Management  Office,  thus 
having  the  required  authority  in  directing  the  DTC  activities,  while  having  access  to 
Engineering,  Production,  Logistics,  and  other  program  related  functions  and  informa¬ 
tion.  The  DTC  manager  not  only  manages  the  overall  DTC  effort  but  also  chairs  a  DTC 
Audit  Committee  that  consists  of  the  Directors  of  the  engineering,  production,  logis¬ 
tics  support  and  finance  groups.  The  Audit  Committee  is  more  than  just  a  staff  func¬ 
tion;  It  consists  of  line  Directors  whose  personnel  are  assigned  to  the  program.  The 
Audit  Committee,  therefore,  has  the  authority  to  react  to  problems  by  directing 
actions  to  be  carried  out.  It  is  beneficial  if  members  of  the  committee  are  directly 
involved  in  other  related  company  programs,  thus  providing  "cross-pollination"  of 
ideas,  techniques,  and  experience  gained  on  these  programs.  Because  the  Audit  Com¬ 
mittee  members  represent  all  of  the  disciplines  Involved  in  developing  the  product 
they  can  critically  evaluate  the  impact  of  trade-oTf  decisions  from  many  viewpoints. 

It  is  suggested  that  the  Audit  Committee  attend  the  System  Poniqn  Review  (SDR)  . 
Results  of  the  other  design  reviews,  such  as  electrical  and  mechanical  design  reviews 
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can  be  summarized  for  the  Audit  Committee  for  follow-on  action  if  required.  The 
committee  should  meet  every  month  to  review  DTC  production  cost  updates,  and  in  addi¬ 
tion  should  Met  whenever  the  DTC  aanager  requires  itj  e.g.,  when  design  changes  have 
been  submitted  for  approval  prior  to  iaplementation. 

In  order  to  allow  the  DTC  aanager  to  exercise  control  over  the  design  process,  he 
Bust  be  provided  with  DTC  production  cost  updates,  which  should  be  generated  at 
appropriate  intervals  during  the  developaent  program.  These  can  be  presented  in  a 
cost  status  and  history  package  such  as  that  shown  in  Figures  3,  4  and  5.  The  DTC 
aanager  aust  track  these  cost  projections  at  sufficiently  close  intervals,  weekly  in 
aost  cases,  to  detect  probleas  before  designs  proceed  too  far. 

The  module  level  data  contained  in  Figure  3  are  provided  by  Production  Engineering 
using  inputs  from  the  disciplines  listed  on  the  chart,  i.e.,  production  engineers, 
test  engineers,  quality  control,  procurement,  etc.,  based  on  the  current  status  of 
the  design.  This  Nodule  Status  chart  provides  a  measure  of  how  well  the  DTC  goal 
will  be  aet  in  teras  of  the  difference  between  the  target  cost  and  current  cost 
estiaate.  The  column  aarked  'Difference  Between  Last  and  Current  Status*  reflects 
the  success  of  efforts  to  reduce  or  control  coats  during  the  program.  The  last  three 
columns  reflect  the  confidence  level  of  the  DTC  estiaate  based  on  the  nature  of  the 
cost  data. 

Figure  4  is  the  LRU  Cost  Status  chart  which  is  directly  derived  from  the  total  of  the 
aodule  charts  plus  additional  costs  associated  with  the  wiring,  assembly  and  test  of 
the  LRU  itself. 

Finally,  it  is  very  desirable  to  chart  the  cost  history  of  each  LRU  in  graphic  form 
to  allow  the  DTC  manager  to  aonitor  the  cost  trend  relative  to  the  target.  Such  a 
chart  for  a  single  LRU  is  shown  in  Figure  5. 

FORMAL  GUIDELINES 

It  is  strongly  recommended  that  a  set  of  guidelines  or  standard  procedures  be  de¬ 
veloped  that  are  documented  and  Bade  available  to  all  project  personnel.  These  pro¬ 
cedures  can  be  incorporated  into  the  company's  standard  policies  manual,  or  be  pre¬ 
pared  specifically  for  a  particular  program.  The  standard  Bhould  address  overall  DTC 
policy,  assign  responsibility  and  list  specific  procedures  to  be  followed  during  the 
DTC  program. 

An  overall  description  of  OTC  should  be  spelled  out  in  a  Standard  Procedure  Document 
which  should  begin  by  defining  DTC  and  the  concepts  of  ESSENTIAL  vs.  DESIRED  features 
and  the  conditions  under  which  it  must  be  applied.  It  should  specifically  identify 
responsibilities  for  initiating  the  DTC  program  and  for  translating  the  customer's 
cost  and  performance  specifications  to  a  form  suitable  for  the  engineering  groups. 
It  must  designate  the  approval  authorities  for  each  major  element  of  the  equipment 
DTC  targets.  The  method  for  partitioning  the  system  target  cost  among  the  LRU's  must 
be  defined  as  must  the  responsibilities  of  the  cognizant  Engineering  and  Production 
Departments  in  the  total  DTC  process.  The  method  to  be  used  by  the  Audit  Committee 
for  reviewing  cost  progrest  aust  be  specified  as  must  the  criteria  for  reiterating 
the  design  should  that  be  necessary.  The  standard  should  be  applied  to  all  programs 
and  projects  which  involve  substantially  new  designs  having  significant  production 
potential . 

In  addition  to  the  project  or  management  oriented  guidelines  discussed  above,  the 
design  team  should  be  provided  with  a  set  of  Engineering/Manufacturing  guidelines  to 
be  followed  for  the  specific  product  under  development.  Though  these  guidelines  may 
change  for  different  products,  and  as  technology  changes,  they  should  be  established 
and  adhered  to  for  a  specific  product  during  its  developmental  phase.  The  guidelines 
are  essentially  sets  of  technical  "do's"  and  "don'ts".  Examples  of  “do's"  are:  use 
components  from  the  preferred  parts  list,  use  minimum  number  of  part  types,  minimize 
the  number  of  separate  assemblies  to  minimize  I/O  buffering  and  loss  of  speed  in 
digital  circuits.  Examples  of  "don'ts"  are:  no  circuit  adjustments,  no  calibration 
of  components  or  sub-assemblies,  no  selected  parts  or  non-standard  values  for  parts. 
Obviously,  soae  guidelines  are  applicable  to  all  or  most  avionic  products,  while 
others  reflect  a  particular  company's  reliability,  cost  and  logistic  support 
experience.  Once  established,  any  deviation  from  the  guidelines  should  require  the 
approval  of  the  DTC  manager  and  the  Audit  Committee. 

ENGINEERING 

Based  on  the  system  requirements  which  were  generated  after  consideration  of  the 
customer  requirements,  the  overall  system  partitioning  should  be  determined  (Step  2 
of  Figure  1),  System  functions  must  be  allocated  to  the  Line  Replaceable  Units  (LRU) 
and  then  to  the  modules.  Partitioning  should  be  performed  to  minimize  hardware 
costs.  For  example,  bb  one  distributes  functions  among  a  number  of  LRU's  the  addi¬ 
tional  components  and  power  for  I/O  buffering,  connectors  and  cables  (some  shielded) 
can  add  cost  and  reduce  reliability  while  providing  no  added  functional  capability. 
On  the  other  extreme,  one  very  large  LRU  neemingly  attractive  from  an  initial  cost 
viewpoint  may  have  severe  installation  problems  and  maintenance  deficiencies  and 
increased  life  cycle  cost.  System  function  partitioning,  therefore,  requires  judge¬ 
ment  and  considerable  experience  with  the  banic  hardwaie  and  its  application. 
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The  next  task  after  function  partitioning  is  to  prepare  product  specifications  for 
each  LRU  and  each  module  (Step  3).  These  specifications  should  provide  detailed 
requirements  including  performance,  size,  weight,  power  consumption,  and  inputs  and 
outputs.  Performance  requirements  for  the  modules  are  derived  from  an  overall  system 
performance  analysis  that  in  turn  relates  directly  to  the  customer's  system 
requirements.  Because  of  the  close  relationship  between  cost  and  performance 
specifications,  the  latter  should  be  generated  to  meet  the  system  needs  without 
"overkill*.  It  is  extremely  desirable  to  make  the  module  performance  requirements 
directly  traceable  to  the  system  requirements  in  order  to  enable  rapid  cost  versus 
performance  tradeoffs  to  be  performed  during  LRU  and  module  design.  The  module  and 
LRU  performance  requirements  must  be  approved  by  the  DTC  manager  and  the  Audit 
Committee. 

Once  the  module  and  LRU  requirements  have  been  determined,  cost  budgets  can  be 
assigned  to  these  units.  Selection  of  the  cost  numbers  are  based  primarily  on 
experience  at  this  point  although  avionics  suppliers,  who  have  developed  previous 
generations  of  the  product,  usually  have  on-going  relatable  research  and  development 
designs  to  form  the  basis  for  cost  estimating.  The  allocation  of  costs  to  the  module 
level  is  performed  by  the  DTC  manager  with  assistance  from  the  designers,  production 
and  cost  estimators  and  reviewed  by  the  Audit  Committee. 

The  module  designers  will  by  now  have  a  complete  set  of  requirements  for  their 
respective  modules  -  cost,  performance,  interfaces  and  other  characteristics  -  and 
can  begin  the  detailed  design  activity  (Step  4) . 

It  is  appropriate  at  this  point  to  emphasize  the  benefits  that  Computer  Aided 
Engineering  (CAE)  can  provide  not  only  in  generating  the  electrical  design,  but  also 
in  optimizing  component  parts  selection.  A  computerized  component  data  base  which 
contains  the  cost,  electrical  paraMters  and  physical  parameters  of  all  components 
permits  rapid  and  complete  computation  to  evaluate  the  trade-offs  between  parameter 
choices  and  system  benefits.  This  subject  is  discussed  later  in  this  paper. 

The  results  of  this  design  effort  in  the  form  of  detailed  parts  lists,  schematics, 
assembly  drawings  and  test  equipment  requirements  is  provided  to  production 
engineering  and  logistics  to  translate  into  preliminary  production  costs  and  life¬ 
cycle-costs  (Step  S)  .  Performance  analyses  by  module  designers  of  their  respective 
modules  are  reviewed  by  the  systems  group  to  determine  the  degree  of  compliance  with 
overall  requirements. 

Step  C  of  Figure  1  represents  a  decision  point  in  the  DTC  process.  The  results  of 
the  design  analyses  are  collected  and  reviewed  in  detail  by  the  DTC  manager  and  the 
Audit  Committee  for  compliance  with  the  performance  and  cost  targets  and  to  determine 
the  next  course  of  action.  The  three  possible  cases  are  diagrammed  in  Figure  6  and 
discussed  below. 

CASE  1  -  DTC  BUDGETS  ARE  BEIWG  MET 

This  is  the  sought  after  case.  Performance  features  and  life-cycle-cost  may  continue 
to  be  reiterated  to  further  optimize  overall  system  performance  and  to  lower 
production  and  life-cycle-cost  should  program  schedules  permit.  The  Program  Manager 
would  then  review  the  overall  program  status  with  the  procuring  agency,  and  release 
to  production  when  the  proper  point  in  the  schedule  is  reached. 

CASE  2  -  DTC  EXCEEDS  BUDGET  BY  5  PERCEWT  OR  LESS 


Trade-offs  of  cost  and  performance  will  continue  until  either  the  budget  overrun  is 
eliminated,  or  it  is  determined  that  further  cost  reduction  effort  is  not  warranted 
and  the  overrun  can  be  absorbed  by  "underruns"  on  other  modules. 

CASE  3  -  INDIVIDUAL  DTC  BUDGETS  ARB  EXCEEDED  BY  5  PERCENT  OR  MORE 

In  those  cases  where  an  individual  DTC  budget  exceeds  its  goal  by  5  percent  or  more, 
the  responsible  performing  organization  will  prepare  a  Recovery  Plan  and  review  same 
with  the  DTC  Manager  and  the  Audit  Committee.  Should  the  DTC  Manager  determine  the 
total  internal  DTC  target  is  not  in  jeopardy  and  the  Recovery  Plan  is  feasible  on  the 
basis  of  analyses  and  trade-offs  performed,  the  Recovery  Plan  will  be  approved,  a 
budget  adjustment  will  be  authorized,  and  the  Recovery  Plan  will  be  implemented  by 
the  responsible  organization. 

If  the  DTC  goal  cannot  be  met  after  examination  of  all  possibilities  has  been  made, 
then  the  DTC  Manager  and  the  Program  Manager  must  open  a  dialogue  with  the  customer. 
He  must  be  appraised  of  the  magnitude  of  the  problem  and  must  be  engaged  in  a 
determination  of  the  next  step.  This  next  step  could  range  from  relief  from  some  of 
the  ESSENTIAL  requirements  to  a  major  redirection  of  the  program.  Such  a  situation 
would  arise  only  if  some  gross  miscalculation  of  the  technical  difficulty  of  the  task 
had  been  made  at  the  outset.  This  is  not  very  likely  for  the  development  of  hardware 
using  mature  technology. 

2.4  DTC  FOLLOW-UP  DURING  PRODUCTION 

The  DTC  technique  for  meeting  tight  cost,  and  pot  •  or  mnnec  » nqu  ( i  cnti'ii  t  u  stunt  coni  lnu«- 
throughout  the  production  phase. 
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After  the  design  is  frozen  and  the  drawings  released,  the  production  plan,  which  had 
been  generated  during  the  development  phase  to  support  the  analysis  of  production 
costs,  eust  be  updated  and  implemented.  At  this  point  the  manufacturing  cost 
analysis  should  be  updated. 

The  detail  level  to  which  production  costs  must  be  recorded  to  provide  control  is 
shown  in  Figure  7.  This  is  a  value-added  flow  diagram  which  begins  with  raw  material 
acquisition  and  ends  with  an  accumulated  total  manufacturing  cost  for  the  product. 
It  uses  material  quotations  from  potential  vendors,  in-house  fabrication  actuals,  and 
test  and  support  labor  for  all  of  the  operations  to  be  performed.  Efficiency 
factors,  assembly  and  test  yield,  and  rework  ratios  may  be  derived  from  these  data. 
This  complete  model  accurately  identifies  the  cost  drivers  and  isolates  areas  for 
significant  cost  reduction  opportunities.  To  be  maximally  effective,  the  Production 
Cost  Tabulation  of  Figure  7  should  be  updated  frequently  to  detect  changes  or  trends 
in  production  costs  due  to  component  prices,  producibility  or  yield  problems. 

This  type  of  reporting  must  begin  early  in  the  production  phase.  It  provides  the 
kind  of  data  (discrepancies,  unfavorable  ratios,  etc.)  needed  to  identify  production 
problems  readily. 

The  data  provided  by  the  Production  Cost  Tabulation  of  Figure  7  must  be  tracked  by 
the  production  groups  and  reported  through  the  use  of  a  Producibility  Analysis  Report 
shown  as  Figure  8.  This  report  may  be  initiated  by  any  of  the  production  groups  such 
as  production  engineering,  procurement,  methods,  inspection,  etc.,  who  would  be  iden¬ 
tified  in  the  'Problem  Reported  By*  column.  A  proposed  solution  might  be  generated 
by  joint  action  or  the  problem  might  be  referred  back  to  engineering.  The 
'Engineering  Response*  would  generally  be  in  the  form  of  a  Revision  Notice 
delineating  a  drawing,  part  or  manufacturing  procedure  change  which  has  received  the 
proper  DTC  management  reviews  and  approvals. 

It  must  be  pointed  out  that  the  DTC  design  phase  results  in  a  paper  output  of  perfor¬ 
mance  and  cost  estimates.  It  is  in  the  production  phase  that  the  degree  of  DTC 
success  is  truly  established  as  the  product's  actual  performance  is  determined  by 
ATP/Qualification  Tests  and/or  Plight  Test,  and  as  actual  costs  are  accrued. 

3.  COMPUTER-AIDED  ENGINEERING  TECHNIQUES 

The  use  of  computer  aided  engineering  (CAB)  has  become  a  convenient  design  aid  that 
is  now  used  routinely  throughout  the  electronics  industry.  CAE  techniques  are 
mandatory  for  DTC  programs  since  they  make  practical  the  detailed  statistical 
analyses  that  enable  selection  of  the  combination  of  components  that  provide  the  re¬ 
quired  performance  at  the  lowest  cost.  CAE  analyses  are  performed  on  designs  before 
circuits  are  even  breadboarded  to  minimise  development  cost  and  time.  After  a  base¬ 
line  design  has  been  analyzed  satisfactorily,  breadboards  are  built  and  tested  to 
verify  the  analysis.  ' 

3.1  USE  OF  DESK  TOP  CAE 

Systems  employing  primarily  analog  circuitry  can  make  use  of  CAE  programs  contained 
in  desk-top  computers.  For  these  systems,  existing  computer  programs  such  as  ECAP 
are  useful.  Some  systems  may  require  special  programs  to  be  developed  to  perform 
cost  versus  performance  trade-offs.  This  approach  toward  circuit  design  provides 
many  advantages  including  the  following: 

-  development  is  faster  and  costs  less 

statistical  analysis  of  component  error  effects  are  readily  performed 

-  circuit  design  can  be  iterated  until  the  minimum  number  of  different  types  of 
components  is  achieved. 

component  tolerances  can  be  increased  by  iterating  the  design  up  to  the 
specified  performance  levels 

sensitivity  analyses  can  be  performed,  whereby  critical  components  and 
parameters  can  be  identified  in  terms  of  module  output  error 

worst  case  analysis  of  error  effects  can  be  done  to  provide  means  for 
eliminating  all  adjustments 

detailed  design  documentation  can  be  automatically  provided 

analyses  can  be  easily  repeated  if  the  effect:;  of  chanqes  in  module  or 
system  specifications  are  needed  for  DTC  trado-olfs 

3 . 2  COMPONENT  DATA  BASE 

Another  advantage  ot  CAE  is  the  minimization  oC  component  types.  A  Preferred  Puts 
List  (PPL)  generated  at  the  outset  of  the  proqram,  should  contain  proven  but  state 
of-the-nrt  componenta,  and  circuit  designers  should  hr  required  use  these  com 

laments  unless  proof  is  supplied  that  none  of  them  are  suitable  tor  the  specific 
appl lent  ion.  For  example,  the  PPL  ohould  Include  the  specific  resistor  and  capacii'u 
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value*  and  diod*  and  IC  type*  to  be  used  to  reduce  the  number  of  different  active  and 
passive  elements  thereby  simplifying  purchasing  and  inventory  costs,  and  allowing  low 
price,  large  quantity  purchases  to  minimise  production  and  life-cycle  costs.  A 
typical  data  base  is  shown  in  block  form  in  Figure  9.  The  program  should  list 
approxiMtely  40  parameters  for  each  component  that  are  printed  out  on  three  separate 
pages*  one  page  lists  primarily  cost-related  parameters,  the  second,  performance  and 
reliability,  and  the  third,  mechanical  data  such  as  size,  weight,  board  area,  etc.  A 
summary  sheet  should  be  provided  that  includes* 

number  of  components  by  module 

-  the  component  cost  by  module 

-  the  estimated  area  for  layout 
the  weight  of  each  module 

the  failure  rate  and  NTBF  by  module 

A  copy  of  a  typical  sumaury  sheet  as  used  in  the  DTC  development  of  the  U.S.  Army 
AN/ASN-128  is  given  in  Figure  10.  Copies  of  typical  cost,  performance  and  mechanical 
sheets  are  given  in  Figures  11,  12  and  13. 

Many  advantages  accrue  from  this  approach.  All  circuit  analysis  programs  are  auto¬ 
matically  tied  to  this  component  data  base.  If  a  circuit  design  change  is  made,  any 
changes  in  components  are  automatically  reflected  in  the  summary  and  components 

lists.  The  printout  also  tells  the  Product  Engineer  how  many  different  kinds  of  com¬ 
ponents  are  being  used.  A  Preferred  Parts  List  is  made  up  and  circuits  are 

redesigned,  by  computer,  to  use  only  those  parts,  if  at  all  possible.  The  summary 
sheet  tells  the  designer  immediately  his  cost  and  performance  status.  Problem  areas, 
such  as  excessive  board  area,  or  potential  temperature  problems  are  quickly 
uncovered,  and  corrective  actions  can  be  taken,  prior  to  any  breadboarding.  Finally, 
a  component  list  for  parts  purchasing  can  be  made  up  "instantly”  for  the  entire 

system  since  a  listing  of  the  total  number  of  each  type  of  part  used  in  the  system  is 
provided  as  an  output.  Maximum  advantage  can,  therefore,  be  taken  of  large  quantity 
purchasing  agreements. 

3.3  UMIQUB  CAE  APPLICATIONS 


Computer  aided  engineering  is  not  limited  to  electronic  circuit  design  and  layout  but 
can  be  beneficial  in  other  areas  of  design.  For  example,  microwave  antenna  array 
design  has  always  involved  some  "cut  and  try*  methods,  with  little  flexibility  in 
optimisation  because  of  the  costly  and  time  consuming  nature  of  the  experimental  pro¬ 
cedures.  At  Singer-Kearfott,  a  computer  program  has  been  developed  which  permits 
rapid  and  effective  design,  analysis,  and  fabrication  of  test  models  of  a  printed 
antenna.  (Excellent  correlation  has  been  consistently  obtained  between  predicted  and 
measured  performance.) 

Figure  14  shows  the  inputs  to  this  program  and  the  results  which  are  produced.  The 
inputs  Include  the  physical  size  available  for  the  antenna  aperture,  the  direction  of 
the  peak  of  the  beam  and  the  allowable  side  lobe  level.  The  program  will  print  out 
the  electrical  performance  parameters  of  the  antenna  and  the  physical  details  and 
dimensions  of  the  radiating  elements.  The  latter  Information  is  used  directly  to 
generate  the  artwork  for  etching  the  printed  antenna  and  for  constructing  other 
Mchanical  features. 

In  this  program,  Monte  Carlo  techniques  are  used  to  estimate  the  effects  of  dimen¬ 
sional  tolerances.  This  is  preferable  to  the  usual  worst-case  analysis  which,  when 
applied  to  microwave  assemblies,  has  been  shown  to  yield  costly  and  "over-performing* 
designs.  A  flow  diagram  of  this  technique  is  shown  in  Figure  15.  The  key  input  to 
this  program  is  the  rms  tolerance  of  the  relevant  antenna  dimensions.  These  are 
applied  to  a  random  number  generator  to  produce  random  sets  of  antenna  dimensions 
having  a  variance  related  to  the  input  rms  tolerance.  The  performance  range  of  the 
antennas  which  will  be  produced  is  then  computed  and  the  histogram  shown  is  generated 
for  a  specified  parameter,  in  this  case  the  side  lobe  level.  For  the  case  shown,  the 
mechanical  tolerance  allowed  will  produce  a  99  percent  yield  of  acceptable  antennas. 
The  use  of  conventional  design  techniques  would  incur  a  cost  much  higher  than  the 
benefit  which  would  result  from  the  1  percent  higher  yield. 

3.4  ADVANCED  CAE/CAD 


The  above  section  described  a  CAE  and  data  base  concept  successfully  applied  to  RF 
and  highly  analog  oriented  systems.  With  electronic  systems  becoming  more  digital  in 
nature  and  Printed  Wiring  Boards  (PWB's)  and  Very  Large  Scale  Integrated  (VLSI) 
Circuits  becoming  ever  more  complex  (i.e.,  complexity  doubling  every  2  years)  use  of 
a  highly  integrated  sophisticated  CAE  system  has  become  mandatory. 

Typical  of  modern  CAE  tools  for  the  design  of  dlqital  electronics  is  the  Prime  850 
Computer  workstation  system  which  includes  an  EPMS  (Electronic  Design  Management 
System)  and  THEMIS  (The  Hierarchical  F.vent-dr  iven  Multilevel  Interactive  Simulator). 

ELECTRONIC  DATA  MANAGEMENT  SYSTEM  (EDMS) 


EDMS  software  integrates  the  electronic  engineering,  de-iign,  draft  inq,  and  testing 
Information  that  goes  from  the  Initial  elect r leal /elect i on lc  clicntt  concept  to  a 
finished  proven  deiiign,  piovidlng  a  single  Data  Itase  Management  Syntem  that  can  he 


v  .*• 
vV-V 

**  A  .**' 


JSNJdXJ  iNiWNMJAOD  1  v  1 1  Uiuhdi.i  in 

*  a*  ‘  .  • 

.*•  *•  V'  \\V_V.V. 


shared  by  all  members  of  a  development  team. 


The  BOMS  features  two  integrated  data  bases;  an  Electrical/Electronic  Component  Parts 
Library  that  can  contain  all  of  the  standard  and  customised  items  suitable  for  elec¬ 
tronic  designs,  and  a  Project  Design  Data  Base  (PDDB)  that  centralises  all  informa¬ 
tion  for  a  particular  design,  thereby  permitting  all  users  to  access  the  same  data 
(including  cost)  for  consistency  and  accuracy.  The  PDDB  includes  the  preferred  parts 
list. 

The  engineer  inputs  the  Schematic  (Logic  or  Circuit  Diagram)  via  a  Graphic  Station 
into  the  Project  (Design)  Data  Base  using  libraries  within  the  standard  Controlled 
Coaq>onent  Parts  Library  Data  Base.  The  Project  Manager  and/or  DTC  Manager  has  the 
freedom  to  assign  a  number  of  libraries  or  to  generate  an  additional  sub-library  for 
new  parts,  if  needed,  for  a  particular  project.  When  a  Parts  List  is  extracted  from 
EDMS,  parts  are  categorised  as  to  whether  they  are  standard  or  nonstandard.  This 
Component  Library  Data  would  be  controlled  by  Component  Engineering.  Users  would 
have  read-only  access  privileges,  being  restricted  from  doing  any  editing,  deleting 
or  changing  of  component  data.  The  Component  Library  Data  Base,  in  addition  to 
physical  characteristics  and  diagram  presentations,  can  include  cost  related  data 
(component  cost  plus  assembly/test  cost),  reliability  failure  rates,  and  electrical 
characteristics. 

EDMS  includes  several  standard  utility  programs  such  as  signal  loading,  equivalent 
gate  sumMtion,  cross-reference  checking  and  comparison,  and  power  dissipation  and 
cost  summarisation. 

When  a  change  is  made  to  the  project  data,  EDMS  will  automatically  update  all  records 
that  are  impacted.  The  system  automatically  records  information  detailing  who  made  a 
change.  The  entire  history  of  a  product's  development  and  cost  projections  is  docu¬ 
mented  and  on  file  for  project  management  review. 

SIMULATION  OP  DIGITAL  CIRCUITS 


With  the  expanding  use  of  increasingly  complex  LSI/VLSI  digital  circuits,  it  is  no 
longer  possible  to  debug  a  wire-wrap  breadboard  version  of  a  system  using  customs 
IC's  when  errors  may  be  within  the  custom  designed  IC's  themselves.  For  designs  that 
only  use  standard  parts,  breadboarding  may  not  be  possible  if  high  speed  logic  is 
used.  In  high  speed  ECL  logic,  wire  delay  significantly  affects  circuit  operation 
and  the  wire-wrap  version  is  not  an  accurate  model  of  the  printed  circuit  version. 
Finally,  the  increase  in  the  gate  count  of  digital  systems  is  making  it  more  diffi¬ 
cult  to  detect  and  correct  errors  during  hardware  prototyping. 

The  Hierarchical  Event-driven  Multilevel  Interactive  Simulator  (THEMIS)  permits 
design  engineers  to  perform  logic  simulation  of  large  complex  circuits  of  up  to  l 
million  gate  equivalents.  Models  can  be  generated  at  various  levels  (switch,  gate, 
functional  and  compiler  language)  enabling  modeling  when  the  actual' circuit  configu¬ 
ration  is  unknown  or  has  not  yet  been  designed. 

THEMIS  permits  the  modeling  of  strengths  of  a  signal  as  well  as  its  value.  Addi¬ 
tionally,  the  timing  characteristics  of  models  can  be  more  thoroughly  defined  since 
there  are  different  delays  for  rising  and  falling  edges,  delays  associated  with 
capacitive  loading  as  well  as  charge  decay  often  encountered  in  MOS  circuits.  Set  up 
and  hold  conditions  can  also  be  described  and  race  conditions  can  be  detected  and 
reported.  Temperature  and  loading  effects  simulating  various  application  environ¬ 
ments  can  be  added  to  the  program.  This  type  of  CAE  facility  is  an  excellent  tool 
for  parametic  analysis  and  DTC  optimization. 

Finally,  the  THEMIS  Fault  Simulator  utilizes  the  concurrent  fault  simulation 
technique  that  permits  the  simulation  of  many  faults  in  parallel.  This  will  result 
in  considerably  faster  operation  as  compared  to  existing  serial  fault  simulators 
which  take  many  CPU  hours  to  simulate  a  moderately  complex  circuit.  This  capability 
has  an  important  benefit  for  production  testability  at  either  the  device  or  card 
level. 

The  Prime  EDMS/THEMIS  CAE/CAD  concept  described  above  and  shown  in  Figure  16  provides 
the  design  engineer  with  the  tools  needed  to  translate  their  ideas  into  hardware  in 
minimum  time  and  with  minimum  chance  for  errors,  while  giving  management  the  tools  to 
control  and  monitor  the  design  process,  product  cost  and  projected  reliability. 

4.  A  DESIGN-TO-COST  CASE  HISTORY  -  DEVELOPMENT  OF  THE 

AN/ASN-128  LIGHTWEIGHT  DOPPLER  NAVIGATION  SYSTEM  ( LDNS) 

4.1  THE  AW/ASM- 128 

The  LDNS  is  the  result  of  a  conscientiously  applied  Donign-to-Cont  program  in  which 
system  design  features  were  continuously  traded  off  against  cost. 

To  better  understand  the  ASN-128  DTC  program  and  itn  results,  a  brief  description  of 
the  syitfem  will  be  given.  The  AN/ASN-12B  t.lghtwe  i  ght  Doppler  Navigation  Systrm 
(LDNS)  in  the  standard  airborne  Doppler  navigation  nyntem  tor  the  u.S.  Army  and  for 
the  military  forces  of  several  other  count  r d  «-n .  The  I  DNS  oonsid”  of  three  unit”:  > 
Here  Ivor  Tt  nnnml  t  ter-Antenna  (H'l’A),  a  Signal  Data  Convi-t  lei  (Six')  .ml  ,■  Computet - 
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Display  Unit  (CDU) .  Figure  17  shows  these  three  units. 


The  RTA  and  SDC  constitute  the  Doppler  Radar  Velocity  Sensor  (DRVS)  which  contin¬ 
uously  measures  the  velocity  of  the  aircraft.  The  CDU  provides  the  flight  crew  with 
controls  and  displays,  and  contains  the  navigation  computer .  With  inputs  from  the 
vehicle's  heading  and  vertical  references,  the  ASN-128  LDNS  provides  accurate 
velocity,  present  position,  and  steering  information  from  ground  level  to  over  10,000 
feet.  It  is  completely  self-contained  and  requires  no  ground  based  aids. 

The  entire  system  is  solid-state,  weighs  less  than  13.61  Kg  (30  pounds),  and  requires 
less  than  100  watts  of  28VDC  Power.  Operational  mean-time-between-failure  is  well 
over  1,000  hours. 

Built-in-Test-Equipment  isolates  failures  to  the  LRU  and  also  to  the  module  level  to 
simplify  maintenance  and  eliminate  the  need  for  field  test  equipment. 

4.2  DEVELOPMENT  HI STORK 

The  AH/ASN-128  was  developed  using  the  Design-to-Cost  methodology  described  in  the 
foregoing  section.  The  customer,  in  this  case  the  U.S.  Army,  provided  a  DTC  cost 
target  predicated  on  a  specified  production  quantity  and  rate  over  a  specified  future 
time  period.  A  performance  specification  delineated  the  ESSENTIAL  and  DESIRED 
features.  (See  Table  I.) 

These  specifications  were  generated  by  the  Army  after  a  survey  had  been  made  by  an 
Army  committee  assigned  to  review  preliminary  approaches  offered  by  candidate 
vendors.  This  committee  visited  each  vendor  and  performed  an  in-depth  review  of  his 
equipment,  in  some  cases  down  to  the  parts  list  level,  to  obtain  a  data  base  for 
generating  the  DTC  specification.  In  this  program,  Singer-Kearfott  was  one  of  two 
suppliers  selected  to  develop  the  LDNS. 

Singer-Kearfott's  development  effort  followed  the  DTC  methodology  outlined  pre¬ 
viously.  Some  of  the  design  ground  rules  that  were  estabished  early  in  the  program 
are  worth  setting  down  despite  their  obvious  nature.  These  were: 

Simplicity  of  Design  -  start  with  a  simple  design  and  keep  it  simple. 

State-of-the-Art  Innovations  -  use  only  if  they  have  been  proven  and  are  cost 
effective,  not  just  because  they  ate  new. 

-  Use  existing  designs  wherever  practical  -  saves  cost  of 

design,  test  equipment,  handbooks,  drawings  and  productionizing. 

Incorporate  producibility,  maintainability  and  reliability  features  into  the 
equipment  design  at  the  start 

During  the  detailed  system  and  hardware  design  phase  a  number  of  significant  trade¬ 
off  decisions  were  made  that  affected  the  cost  of  the  LDNS.  Some  examples  of  these 

are: 


Automatic  terrain  bias  compensation,  which  is  highly  preferable  operationally, 
was  achieved  by  using  antenna  beam  shaping  methods  as  the  lowest  cost  approach 
compared  to  beam  lobing  and  a  land-sea  switch 

-  Use  of  dense  electronic  packaging  in  the  CDU  to  allow  inclusion  of  the  computer, 
thereby  eliminating  a  separate  computer  LRU. 

Use  of  a  single  card  CPU,  namely  the  SKC-3020  which  was  already  developed,  in 
production  and  directly  applicable 

BITE  was  incorporated  to  the  module  level  to  eliminate  special  test  equipment 
thus  reducing  LCC  cost 

Use  of  DIPS  in  the  remainder  of  the  system  to  reduce  component  and  assembly 
costa 

-  A  rechargeable  battery  and  charging  circuit  to  sustain  the  memory  during  power- 
off  conditions  had  been  considered.  This  was  rejected  in  favor  of  a  throw-away 
battery  which  was  already  in  Army  inventory,  resulting  in  significantly  reduced 
cost  due  to  elimination  of  the  charger. 

In  addition  to  the  above  trade-offs,  the  use  of  computer  aided  design  and  the  early 
involvement  of  production  experts  were  major  contributors  to  meeting  the  cost 
targets.  The  CAE  permitted  minimisation  of  mechanical  and  electrical  tolerances  and 
elimination  of  the  need  for  trimming  or  adjusting  on  the  production  line. 

The  early  involvement  of  production  experts  resulted  In  card  designs  suitable  for 
automatic  insertion  of  components  and  use  with  automatic  test  equipment. 

The  low  parts  count,  and  the  reduction  in  febr lent  ion- i nduced  failures  by  automated 
production  techniques,  resulted  in  n  predicted  MTliF  of  over  .’,0110  Imum  without  t  lie 
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us*  of  costly  HiRel  components.  The  AN/ASN-128  production  cost  for  the  initial  buy 
of  equipments  was  nearly  25  percent  below  the  DTC  goal  originally  assigned  to  it,  and 
the  goal  itself  was  significantly  lower  that  the  actual  cost  of  any  Dopplers  in 
production  at  that  time. 

4.3  LIFE  CYCLE  COST  CONSIDERATION 

The  DTC  program  which  minimized  the  production  cost  of  the  LDNS  also  recognized  the 
requirement  to  minimize  Cost  of  Ownership  or  Life-Cycle  Costs.  The  Life-Cycle-Costs 
were  defined  as  the  production  cost  plus  ten  years  of  operating  and  maintenance 
costs.  These  costs  were  computed  and  traded  off  against  various  maintenance  policies 
to  develop  the  most  cost  effective  maintenance  plan. 

The  significant  design  characteristics  which  led  to  a  minimum  Life-Cycle-Cost  are  the 
following: 

-  Low  Acquisition  Cost 
High  Reliability  (MTBF) 

-  BITE  capability  to  isolate  failures  to  the  module  level  without  the  use  of 
special  test  equipment 

Minimum  use  of  non-standard  parts 
Low  mean  time  to  repair  (MTTR) 

No  trimpots  to  become  misadjusted 

4.4  MEETING  THE  ESSENTIAL  TECHNICAL  REQUIREMENTS 

The  ESSENTIAL  and  DESIRED  technical  requirements  are  listed  in  Table  1  together  with 
the  corresponding  LDNS  capabilities.  It  shows  that  the  LDNS  exceeded  the  ESSENTIAL 
requirements  without  compromising  the  DTC  target. 

The  many  trade-offs  of  features  versus  cost  performed  during  the  DTC  effort  did  not 
affect  acceptance  by  the  user  community  of  the  LDNS  as  evidenced  by  the  successful 
testing  and  placement  of  orders  for  over  3,000  systems  by  the  U.S.  Army  and  military 
agencies  of  eight  other  countries. 


TABLE  1.  ESSENTIAL  TECHNICAL  REQUIREMENTS 


REQUIREMENTS 

SPECIFICATION 

(ESSENTIAL/OESIRED) 

LDNS  CHARACTERISTIC 

TOTAL  WEIGHT 

50  LB/35  LB 

28  LB 

SIZE 

3500  IN. 3/2000  IN. 3 

1191  IN. 3 

CDU 

HEIGHT  -  6  INCHES 

DEPTH  -  8  INCHES 

HEIGHT  -  6  INCHES 

DEPTH  -  8  INCHES 

PRESENT  POSITION 

2»  CEP/1%  CEP 

1.3%  CEP 

ALTITUDE 

2-10,000  PT/2-15 , 000  FT 

0-14,000  FEET 

DESTINATIONS 

6/10 

10 

PREDICTED 

RELIABILITY 

(MTBF) 

1000  HOURS 

2121  HOURS 

5 .  CONCLUSION 

The  writer  is  convinced  that  a  properly  implemented  DTC  proqram  in  a  powerful  tech 
nique  for  reducing  the  production  and  Life-Cycle  r0nt  of  new  avionics. 

This  paper  has  provided  a  detailed  implementat  ion  methodology  bar.ed  upon  experience 
gained  on  actual  development  proqrams.  The  pronpcctive  implementor  of  this  type  of 
program  is  cautioned  that  Deslgn-to-Cost  is  not  "juRt  another"  cost  reduction  tech¬ 
nique,  but  it  is  one  that  requires  strong  discipline  and  close  cooperation  between 
the  procuring  agency  and  the  contractor  to  keep  cont  an  a  mnior  denign  requirement. 
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Experience  has  shown  that  saveral  elements  of  DTC  methodology  are  particularly 
important. 

-  The  user  oust  be  realistic  in  dividing  design  features  into  ESSENTIAL  and 
DESIRED  categories  -  it  takes  a  strong  effort  to  avoid  staking  all  features 
ESSENTIAL 

-  An  open  two-way  dialogue  Bust  occur  between  developer  and  buyer  regarding  the 
relative  importance  of  the  DESIRED  features 


-  The  user/buyer  must  be  willing  to  accept  the  significant  responsibility  in 
selecting  the  right  coa&lnation  of  ESSENTIAL  and  DESIRED  characteristics,  and  is 
thereby  exposed  to  the  possibility  of  future  criticism  if  operational  experience 
shows  that  this  selection  was  not  correct. 

-  The  developer  is  also  faced  with  difficult  decisions  in  determining  which 
DESIRED  features  will  be  eliminated  to  meet  the  cost  goal.  During  an  evaluation 
of  competing  systems  that  meet  the  DTC  goals,  the  difference  in  DESIRED  features 
could  decide  the  winner. 

Conceived  by  some  as  a  negative  feature  of  DTC  is  the  exposure  of  details  of  procure¬ 
ment  and  pricing  policies  of  the  customer  and  the  vendor,  respectively.  The  vendor 
witnesses  first-hand  the  difference  in  opinion  that  can  occur  within  the  user  com¬ 
munity  regarding  the  importance  of  various  design  features.  The  customer  obtains 
details  of  the  vendor's  cost  breakdown  structure  and  pricing  policies  that  are 
norMlly  not  made  available  and  that  could  possibly  affect  the  vendor's  financial 
relationship  on  other  contracts.  Some  customers  and/or  vendors  may  decide  that  the 
advantages  of  DTC  do  not  justify  these  "exposures". 

Surely  the  customer  could  avoid  the  above  mentioned  Issues  imposed  by  DTC  by  simply 
reverting  to  the  "classical"  buyer/vendor  relationship.  The  buyer  canvasses  the  user 
community  with  his  "wish  lists"  and  converts  these  into  a  firm  system  specification 
for  the  supplier  to  bid  against.  Although  this  procedure  may  seem  easier  for  the 
customer  and  the  vendor,  it  undoubtedly  raises  the  cost  of  the  final  product  over 
that  of  a  system  design  resulting  from  a  thorough  trade-off  between  design  features 
and  their  cost. 

Hopefully,  the  techniques  and  experiences  discussed  in  this  paper  will  convince 
procuring  agencies,  supported  by  equipment  developers,  to  apply  the  DTC  concept  in 
order  to  obtain  cost  effective  and  affordable  avionic  systems. 


REFERENCE 1 

1.  Department  of  Defense  Directive,  "Major  System  Acquisitions",  Number  5000.1, 
March  29,  19*2. 
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PREGU1DAGE  ET  PILOTAGE 
A  L’AIDE  DE  SENSEURS  INERT1ELS  COMPOSITES 


par 

Mr  J.Resseguier 
SAGEM 
BP  51 

F.956 1 2  Cergy  Pontoise  CEDEX 
France 


RESUME 


Pour  rdsoudre  1e  probldme  du  prdguidage  de  petits  engins  dquipds  d'autodirecteur,  SAGEM  a  concu 
et  fabriqud  SUR  MESURE  des  dquipements  SIGAL  (Systdme  lntdgrd  Gyro-Accdldromdtrique  Lid),  compatibles  avec 
les  contraintes  de  volume,  de  maintenabilitd  et  de  prix. 

Ces  systdmes  utilisent  : 

-  des  senseurs  inertiels  “composites"  i  la  fois  gyromdtre  et  accdldromdtre , 

-  un  bouclage  multiplexd, 

-  une  organisation  lide  (STRAP  DOWN), 

-  une  technologic  dlectronique  adaptde. 


1  -  0B0ECT1FS  (Figure  2) 

1.1  -  Le  ddveloppement  de  I'Inertie  permet  d'dquiper  des  vdhicules  trds  divers. 

II  y  a  une  vingtaine  d'anndes,  l'objectif  dtait  l'obtention  de  performances  compatibles  avec  les 
missions  des  engins  balistiques  et  avions  de  combat. 


1.2  -  Ensuite,  le  progrds  technologique  entralnant  une  reduction  des  volunes  et  des  coflts  permit  de  doter 
d'un  systeme  i  inertie  des  vehlcules  moins  sophistiquds. 

Le  systdme  SAGEM  MSD,  construit  autour  du  gyromdtre  GSD  (prdsentd  en  1980  3  une  conference  AGARO), 
a  ddmontre,  au  cours  d'essais  officiels  au  Centre  d'Essais  en  Vol ,  sa  capacite  : 

-  d'alignement  autonome  en  gyrocompas, 

-  de  navigation  en  inertie  pure, 

avec  une  precision  globale  meilleure  que  3  nautiques/heure. 


1.3  -  Dans  le  domaine  des  performances  moyennes,  pour  obtenir  un  meilleur  compromis  coOt-performance, 

SAGEM  a  ensuite  propose  des  dquipements  utillsant  le  GSL  dont  la  classe  est  de  l'ordre  de  quelques 
degrds  par  heure.  Ses  applications  sont  trds  nombreuses  (references  d'attitude,  stabilisation...). 

1.4  -  Aujourd'hui, l'extension  vers  les  petits  engins,  pour  rdsoudre  le  probieme  du  preguidage,  donne  de 

plus  en  plus  d'importance  aux  contraintes  (figure  3)  : 

-  prix, 

-  volume, 

-  grande  dynamique, 

-  trds  faible  temps  de  reaction, 

-  slmplicltd-malntenabilite. 

Les  quantitts  4  fabrlquer  sont  plus  importantes  et  les  performances  moins  critiques. 

Ces  considerations  obliqent  I  concevoir  des  dquipenv-nts  rn  : 

-  Ilmitant  le  nomine  des  composants  (dlectromdcanlqiir'',  ut  din  tronlqur'.) , 
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-  dllminant  les  rdglages  coQteux  au  profit  de  compensations  par  calculateur, 

•  rendant  automatlques  les  fabrications  at  les  contrdles, 

-  s'adaptant  au  volume  dlsponlble  I  bord  du  missile. 

L'objet  de  ce  document  est  de  ddcrire  une  realisation  correspondent  4  ce  besoin. 

2  -  SENSEUR  COMPOSITE  -  PRINCIPE 
2.1  -  Definition 


Par  “senseur  composite"  on  entend  un  capteur  Inertiel  qui,  4  la  fois  gyromdtre  et  accdldromdtre, 
est  bien  adaptd  4  un  volume  rdduit  et  4  un  prix  faible  du  systdme  de  prdguidage. 

Plusieurs  principes  sont  connus.  Dans  1‘exemple  ddcrit  on  ajoute  la  fonction  accdldromdtre  4  un 
gyromdtre  en  mattrisant  les  effets  des  accelerations  lindaires  (balourd). 

A  1'aide  de  3  senseurs  composites  2  axes,  on  realise  un  systdme  de  mesure  triaxlal. 


2.2  -  Principe  du  systdme  de  Mesure  triaxlal 

Nous  supposons  connu  le  principe  du  gyroscope  4  suspension  dynamique  accordde,  utilise  en  mode 
asservi  (mesure  gyromdtrique) . 

Lorsque  sur  un  tel  gyro  (figure  4)  on  ddcale  suivant  la  direction  de  l’axe  de  rotation  le  centre 
de  masse  G  du  volant  (rotor)  par  rapport  au  centre  de  suspension  0,  l'appareil  devient  sensible  non 
seulement  aux  vitesses  angulaires  autour  de  ses  deux  axes  de  mesure,  mais  dgalement  aux  accelerations 
lindaires  le  long  de  ces  mdmes  axes. 

Une  vitesse  angulaire  nx  et  une  acceleration  rx  engendrent  un  couple  C  d'axe  Of  tel  que  : 

C^-iT.n^  +  m.OG.r^ 

(H  =  moment  clndtique  du  volant) 

(m  =  masse  du  volant) 


Les  tensions  mesurdes  u  et  u  sont  des  fonctions  composites  de  si  et  r  : 
x  y 

ux  *  Ax  nx  *  Bx  rx 


u  =  A  n  +  B  r 
y  y  y  y  y 


A  ce  stade,  il  est  Impossible  de  calculer  ox,  rx,  fiy,  ry. 

Cette  difficultd  disparait  avec  3  capteurs  (figure  5)  dont  les  axes  de  spin  sont  paral Idles  aux 
axes  OX,  OY  et  OZ  et  dont  les  coefficients  A  et  B  sont  judicieusement  choisis. 

Aux  erreurs  de  mesure  prds, les  3  capteurs  dellvrent  les  tensions  suivantes  : 


Capteur  G1  : 

uiy  s  \  ny  ‘  Biy  ry 


u1z  1  A1z  fiz  +  Biz  r 


Capteur  62  : 

u2z  =  A2z  nz  *  B2z  rz 
u2x  ‘  A2x  nx  +  82x  r* 


Capteur  G3  : 

u3x  *  A3x  “x  *  83x  rx 
u3y  ’  A3y  “y  ’  B3y  'y 
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On  peut  calculer  ox,  ny,  rx,  ry  «t  ry  si  les  determinants  : 
A1  Bj  -  Aj  B1 


ne  sont  pas  nuls. 


Cette  condition  est  satisfaite  avec  la  configuration 


-  capteur  G1 


:  gyroscope  non  balourdd, 


-  capteurs  G2  et  G3  :  gyroscopes  balourdds  d'une  valeur  identique,  mais  de  motaents  clndtiques 
opposes  {inversion  du  sens  de  rotation). 

Solt  :  A1y  a  A,z  a  * 

B1y“  B1z 

A2z  3  A2x  “  '  A3x  “  *  A3y  “  A 
B2z  *  B2x  “  B3x  “  B3y  “  B 

Les  coefficients  A  et  B  sont  optimises  en  fonction  du  profil  de  vol  du  missile  afin  de 
caractdriser  le  rapport  des  sensibilitds  aux  accelerations  lindaires  et  aux  vitesses  angulaires. 

Par  exemple  :  1  g-« - »-  10°/s. 


2.3  -  Senseur  composite  GSL82 

Le  composant  de  base  est  un  gyroscope  accorde  2  axes  miniaturise  ;  son  schema  est  classique. 

A  partir  de  ce  composant,  SAGEM  a  etudie  et  fabrique  un  senseur  composite  (gyroscope  balourde), 

le  GSL  82. 

La  sensibilite  acceierometrique  est  realisee  par  decalage  entre  le  centre  de  masse  de  l’element 
sensible  (toupie)  et  le  centre  de  1'articulation  (joint  flexible). 

Les  ordres  de  grandeur  des  caractdristiques  physiques  sont  indiquds  sur  la  figure  6  : 

-  1  'encombrement  est  faible, 

-  le  rendement  dc  moteur  couple  de  precession  est  excellent, 

-  la  vitesse  de  rotation  dlevde  permet  d'obtenir  facilement  la  bande  passante  ndcessaire, 

-  le  couple  du  moteur  el  inline  tout  risque  de  desynchronisation, 

-  un  boltier  electronique  incorpord  transforme  le  signal  du  ddtecteur  en  une  tension  continue 
dont  le  facteur  d'echelle  est  normalise. 

3  -  BOUCLAGE  DU  SENSEUR  COMPOSITE  GSL  82 

3.1  -  Objectifs 

Le  bouclage  des  capteurs  obdit  aux  rdgles  suivantes  : 

-  comnande  du  moteur  couple  en  analogique.  Cette  mdthode,  la  plus  simple,  reste  la  plus 
satisfaisante  compte  tenu  des  durdes  des  vols  et  des  tendances  J  osciller  des  gyroscopes  deux 
axes , 

••  digitalisation  des  informations  (vitesse  angulaire  et  accdldration  lindaire)  dans  la  boucle, 
pour  assurer  l'dgalitd  des  intdgrales  des  signaux  analogiques  et  numdriques,  sous  une  forme 
compatible  avec  une  liaison  numdrique  bus, 

-  multiplexage  des  informations  des  3  senseurs, 

-  filtrage,  rdjection  .....  assurds  par  le  calculatopr. 

Par  all leurs  : 

-  1 'dquipement  est  miniaturisd, 

-  la  cadence  des  informations  destindes  au  pilntaqe  est  dlevde  (de  1'ordre  de  bOO  Hz). 

3.2  -  bchdraa  do  bouclage 

le  bouclage  est  schdma t Iquempnt  reprdsenld  figiiir  1. 
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3.3  -  Asservissement  des  6  chatnes 


On  se  reportera  au  schema  synoptlque,  figure  8.  Trols  capteurs  GSL  82  sont  asservis  par  la 
chatne  multiplexde  : 

-  un  multiplex  16  voles,  commend#  par  le  calculateur,  explore  en  sequence  : 

.  les  6  tensions  continues  reprdsentant  les  attitudes  des  elements  sensibles  des  3 capteurs, 

.  les  4  tensions  continues  reprdsentant  les  temperatures  internes  des  capteurs  et  la 
temperature  ambiante, 

.  le  faux  zero  de  la  chatne  eiectronique  de  decodage, 

.  les  differentes  tensions  d’alimentatlon, 

.  (la  frequence  de  multi  pi  exage  est  voislne  de  1  100  Hz), 

-  un  convertisseur  analogique-numdrique  digitalise  les  tensions  ci-dessus  en  mots  de  12  bits, 

-  un  calculateur  traite  les  signaux  de  detection  des  capteurs  (integration,  filtrage,  reseau 
correcteur)  et  calcule  les  commandes  des  moteurs  couple  de  precession  de  ces  capteurs 
(mots  de  16  bits), 

-  un  convertisseur  numdrique  analogique  de  16  bits  transforme  cette  information  en  une  tension 
analoglque. 

Cette  tension  est  aiguillde  vers  le  moteur  couple  correspondent  au  detecteur  scrute,  par  un 
dchantillonneur-bloqueur  de  precision  command#  par  le  calculateur.  Cet  dchantillonneur 
bloqueur  maintient  pendant  une  p#riode  de  multiplexage  le  courant  d 'asservissement  a  un 
niveau  constant. 

Le  signal  traversant  1 ‘dchantillonneur-bloqueur  est  amplifie  par  un  anpl ificateur  propor- 
tionnel  ;  le  courant  correspondent  traverse  le  moteur  couple  de  precession  et  une  resistance 
de  contre-rdaction  ou  de  mesure , 

-  deux  nlveaux  de  con t re- reaction  sont  sdlectionnds  par  le  calculateur,  ce  qui  permet  un 
changement  d'dchelle  automatique  et  conffcre  ainsi  une  bonne  precision  aux  signaux  de  faible 
niveau  (pendant  la  majeure  partle  du  temps  de  la  mission). 


REMARQUE  :  La  precision  de  la  chatne  (conformitd  entre  le  courant  traversant  le  moteur  couple  de  precession 
et  la  valeur  correspondante  digital Isde  acquise  par  le  calculateur)  est  donnde  par  : 

-  le  ddcodeur, 

-  1 'dchantillonneur  bloqueur, 

-  1 'ampl Ificateur  d'asservlssement. 

Les  autres  elements  de  la  chalne  n'intervlennent  pas. 

Le  zdro  de  la  chatne,  testd  l  chaque  sequence  du  multiplexage, est  memorise  dans  le  calculateur 
et  corrlgd. 


4  -  TRAITEHENT  INTERNE 

4.1  -  Eonctions  assurdes  par  le  calculateur  (figure  9) 

Le  calculateur  : 

-  traite  les  signaux  de  detection  et  dlabore  les  ordres  de  precession  (asservissement), 

-  effectue  les  corrections  thermiques  et  les  modelisations  statiques  des  capteurs, 

-  calcule  les  vltesses  angulaires  p,  q,  r  et  les  accelerations  lineaires  ax,  ay  et  a2, 

-  gdre  les  conmandes  de  multiplexage  et  de  sdquencement,  le  ddmarrage  des  toupies,  la  conmutation 
de  gain, 

-  g#re  1' Interface, 

-  contrCle  le  bon  fonctlonnement, 

-  envoie  les  3  sorties  dlgitallsdes  p,  q,  r  sur  3  convertisseurs  numeriques  analogiques 
fournlssant  ces  donndes  sous  forme  analoglque. 
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*.2  -  Compensations  des  erreurs  systdmatiques 

4.2.1  -  Les  erreurs  systdmatiques  de  la  rnesure  ux  sont  : 

Cx  :  derive  constante, 

a  ny  +  a1  flj,  :  decal  age  des  axes, 

8  ry  +  s'  rz  :  sensibility  aux  composantes  d 'acceleration  lineal  re  sur  les  axes  transverses. 

Les  valeurs  des  paramitres  sont,  pour  chacun  des  6  axes,  mesurdes  lors  de  la  calibration  du  bloc 
senseur  et  stockdes  dans  la  mdmoire  REPROM. 

4.2.2  -  Le  rooddle  peut  dtre  complete  par  un  terme  tenant  compte  de  la  variation  du  moment  cinetique 

en  fonction  de  la  Vitesse  d'entratnement  du  gyro  autour  de  l'axe  de  spin. 

Mais  il  s'agit,  en  general,  d'une  perturbation  de  courte  durde  dont  l'effet  integrd  est 
ndgligeable. 

4.3  -  Compensation  des  facteurs  d'dchelle 

4.3.1  -  Au to^dc tw uf femen_t 

On  corrige  les  variations  de  facteur  d'dchelle  dues  8  1 'dchauffement  de  1 'aimant  du  moteur- 
couple  lorsque  l'intensitd  d 'asservissement  est  dlevde.  La  durde  des  sol licitations  est  i  prendre  en 
consideration. 

4.3.2  -  Tempdrature_ambiar^te 

La  regulation  thermique  du  bloc  senseur  n'est  pas  ndcessaire.  On  corrige  les  facteurs  d'dchelle 
en  fonction  de  la  temperature  initiale. 

One  compensation  dynamique,  en  vol ,  est  realisable.  Elle  n'est  pas,  en  gdndral ,  envisagde 
compte  tenu  : 

-  de  la  brievetd  des  fortes  perturbations, 

-  de  la  longueur  des  constantes  de  temps  thermiques, 

-  de  la  falble  durde  du  vol. 

4.4  -  Compensation  du  faux  zdro  de  la  chatne 

A  chaque  sequence  (soit  environ  t  1  000  Hz),  le  zdro  de  la  chalne  est  testd.  Le  rdsultat  memorise 
est  introdult  comme  un  terme  correctif. 

4.5  -  Elaboration  des  Informations  de  sortie 

Aprds  correction  des  tensions  mesurdes,  l'unitd  de  traitement  : 

-  sdpare  les  informations  : 

.  vitesses  angulaires, 

.  accelerations  lindaires, 

-  gdre  leur  transfert  par  un  coupleur  au  bus  1  553B  par  exemple. 

Les  sorties  sont  disponibles  500  fois  par  seconde  environ. 

5  -  DESCRIPTION  DU  S1GAL 

(Systdme  Intdgrd  Gyro-Accdldrorndtrique  Lid) 

5.1  -  Gdndral itds 

Disposant  d'un  senseur  (miniaturise  et  ayant  un  qrand  domain-  demesuro)  il  a  dtd  possible  dr 
concevoir  un  systdme  : 

-  de  faible  volume, 

-  de  forme  adaptable  i  l'espace  disponible, 

en  ut 1 1  Kant  les  techniques  des  systdmes  lids  (strap  down)  et  en  opt Imlsant  1 'electrenique  et  la  conne< t  iqui 
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5.2  -  Forme  adoptee 

La  photographie  d'un  des  exemples  de  realisation  de  SIGAL  (figure  10)  montre  A  quel  point  les 
contraintes  de  forme  ont  pu  6tre  prises  en  compte. 

Le  volume  de  cette  realisation  est  de  1,5  dm5. 


5.3  -  Bloc  senseur 


En  fonction  des  contraintes  opdrationnelles  (vol  typique  du  missile)  1 'archi tecture  du 
bloc  senseur  peut  partiellement  evoluer  : 

-  orientation  preferentielle  des  senseurs  par  rapport  aux  axes  de  Vitesse  angulaire  ou 
deceleration  lineaire  maximale. 


5.4  -  Carte  electronique  (figure  11) 

Les  fonctions  d’asservissement  et  de  traitement  sont  regroupees  sur  une  seule  carte  multicouche, 
constitute  de  quatre  elements  relies  par  des  circuits  souples. 

Cette  technologie,  flexible-rigide ,  garantit  un  encombrement  minimum  et  une  excellente  tenue  en 
ambiance  dynamique  severe. 

Un  seul  connecteur  assure  1 'interface  du  systbme  et  du  missile. 

Le  ddcoupage  fonctionnel  fait  1'objet  de  la  figure  12. 

Les  choix  technologiques  (modules  hybrides  -  circuits  prediffuses)  sont  des  compromis  entre  les 
contraintes  de  prix  et  de  volume. 


6  -  SIGAL  -  PERFORMANCES 
6.1  -  Adaptabilitd  (figure  13) 

Les  performances  sont  partiellement  adaptables  aux  caracteristiques  du  vehicule  ;  elles  resultent 
de  divers  compromis  : 

-  domaine  de  mesure  en  acceleration  lineaire  et  en  vltesse  angulaire, 

*  simultandlte  des  valeurs  A  mesurer  ;  les  valeurs  maximales  correspondent  en  general  A  des  axes 
orthoqoniux , 

-axe  (roulis  par  exemple)  des  perturbations  les  plus  importantes  ou  les  plus  critiques. 


En  fonction  des  donnees  opdrationnelles ,  on  optimise  le  balourd  (acctltrombtre)  en  fonction  du 
moment  cinetique  (gyrombtre).  Les  limites  sont  dues  aux  couplages  parasites. 


6.2  -  Ordres  de  grandeur 

Oifferents  systbmes  SIGAL  sont  en  developpement  ;  les  ordres  de  grandeur  des  performances  sont 
indiqubs  sur  la  figure  14. 

Les  performances  dependent,  entre  autres,  du  mode  d 'util isation  adopts  pour  le  systbme  d'arme  : 

-  dormant, 

-  en  veille  permanente. 

Le  temps  de  reaction  InfSrieur  A  deux  secondes  est  compatible  avec  un  missile  dormant. 

7  -  SIGAL  -  DEygOPPEHENT  (figure  15) 

Les  systbmes  SIGAL  sont  actuellement  des  prototypes  existent  en  plusieurs  versions  pour  diverses 
utilisations  : 

Sont  acquis  A  ce  jour  : 

-  le  contrflle  des  performances  des  senseurs  :  environ  trentn  CM  fl?  ont  ete  testes, 

-  les  essais  statiques  et  dynamiques  en  laboratoire.  Us  ont  permis  de  dnvelopper  les  methodes 
et  les  loqlciels  de  calibration  et  devaluation, 

-  la  qualification  dynamique  en  laboratoire  par  simulation  d'un  prnfll  do  vol. 
les  premiers  essais  en  vol  auront  lieu  en  lUft. 
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8  -  SIGAL  -  CONCLUSION  (figure  16) 

Les  systfemes  SIGAL  rdpondent  au  besoin  nouveau  et  trfcs  large  du  prdguidage  des  petits  engir.s 
AIR-AIR,  SOL-AIR  et  AIR-SOL. 

La  disponibllitd  d'un  capteur  bien  adaptd  5  1  'ensemble  des  specifications  permet  de  rdaliser 
des  syst&nes  “SUR  MESURE"  en  ce  qui  concerne  : 

-  la  forme,  l'encombrement , 

-  les  modes  d'utilisation. 
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Figure  3  -  NEW  GOAL 


-  MIDCOURSE  GUIDANCE  FOR  SMALL  MISSILES 

-  CONSTRAINTS 
.  COST 

.  VOLUME  :  1.5  dm3 

.  REACTION  TIME  :  2  *ec. 

.  DYNAMIC  RANGE 
.  SIMPLICITY 

-  HOW? 

.  RUGGED  SENSORS 

.  MINIMUM  NUMBER  OF  INERTIAL  SENSORS 
.  NO  EXPENSIVE  ADJUSTMENTS 
.  ERRORS  COMPENSATION  (COMPUTER) 

.  SEMI-CUSTOM  ELECTRONICS 
.  CUSTOM  DESIGNED  SHAPE 


Figure  4  -  COMPOSITE  INERTIAL  SENSOR 
RATE  GYRO  [AND]  ACCELEROMETER 


— ► 3  COMPONENTS  VS  6 

GYRO  USING  THE  MASS  UNBALANCE  EFFECT 

1  C  =  MEASURED  TORQUE 

(  c  =TT  x  nx  ♦  m .  52  x  rx 


ONE  COMPONENT  - ► 

(  2  EQUATIONS 
'  4  UNKNOWN  PARAMETfRS 
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6  EQUATIONS 
6  UNKNOWN  PARAMETERS 

<nx .  fly ,  Oj ,  rx ,  ry ,  r2) 

•  MECHANIZATION 

A,  B  =  SCALE  FACTORS 
Ux  =  Ak  12x  +  Bx  rx 

Uy  =  Ay  ily+  By  Ty 

SEVERAL  POSSIBILITIES 
EXAMPLE : 


G1 

Ay  =  Aj  =  A 

By  =  Bi  =  0 

G2 

11 

> 

X 

II 

> 

BZ  =  BX  =  B 

G3 

Ax  Ay  =  A 

Bx  =  By  =  B 

•  RELATION  ANGULAR  RATE/LINEAR  ACCELERATION 
EXAMPLE  — ►  10°/« 


TYPE 

WEIGHT 

DIAMETER 

LENGTH 

WHEEL 

SPEED 


Figure  6  -  COMPOSITE  SENSOR  GSL  82 


1  DRY  TUNED  GYRO 
i  WITH  MASS  UNBALANCE 

1000 
30  mm 
36  mm 
6.6  0 
320  Hi 


ANGULAR  MOMENTUM 
TOROUER  YIELD 
REACTION  TIME 
CONSUMPTION 
THERMAL  SfNSOR 
SCALE  1  ACTOR  RATIO 
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Figure  9  -  PROCESSING  UNIT 

CAGING  LOOP 

COMPENSATIONS  OF  COMPOSITE  MEASUREMENTS  (VOLTAGE) 

-  FIXED  DRIFT 

-  AXIS  MISALIGNMENT 

-  TRANSVERSE  MASS  UNBALANCE 

-  ANGULAR  MOMENTUM  MODULATION 
(OPTIONAL  .  GENERALLY  NEGLIGIBLE) 

-  SCALE  FACTOR 

I.  SELF  HEATING 

.  STATIC  TEMPERATURE  ENVIRONMENT 

.  DYNAMIC  TEMPERATURE  ENVIRONMENT 

(OPTIONAL  :  GENERALLY  NEGLIGIBLE) 

-  BIAS  OF  THE  LOOP 

(CONTINUOUS  MEASUREMENT) 

COMPUTATION  OF  ROTATION  RATE  AND  SPECIFIC  FORCE  COMPONENTS 
CONTROL  OF  MULTIPLEX 
CONTROL  OF  INTERFACE 


Fiqure  10  -  SIGAL  EXAMPLE 
(STRAP  DOWN  GYRO  -  ACCELEROSYSTEM) 
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Figure  11  -  ELECTRONICS 
(CASING  Afslb  PROCESSING) 


Figure  12  -  ELECTRONICS 

•  CUSTOM  DESIGNED  SHAPE  - ► 

(ONE  CARD  IN  FOUR  PARTS 
FLEXIBLE  CONNECTIONS 


•  OPTIMIZED  PRICE  AND  VOLUME 

iFULL  CUSTOM  MODULES  (FCM) 
SEMI  CUSTOM  MODULES  (SCM) 
MICROPROCESSOR  (<iP) 
PLUG 
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Figure  13  -  SIGAL  PERFORMANCES 


ADAPTABILITY 


•  RANGES 


ANGULAR  RATE 

+ 

SIMULTANEOUS  LINEAR  ACCELERATION 

ANGULAR  MOMENTUM 
MASS  UNBALANCE 


•  CRITICAL  AXIS  **  ROLL? 

- ►  ORIENTATION  OF  MEASUREMENT  AXIS 


Fiaure  14  -  SIGAL  PERFORMANCES 
- EX  OF  TYPICAL  VALUES 


REACTION  TIME 
RATE  GYRO 


<  2  SEC. 


RANGE 

500°/* 

V4 

SHORTTERM: 

5°/h 

DRIFT 

40°/h 

-  V 

OAY/DAY 

NON  LINEARITY 

2.10'3 

BAND  WIDTH 

100  Hz 

MISALIGNMENT 

5  ARC  MIN. 

*,■ 

ACCELERO 

RANGE 


SHORTTERM  :  1.5.10  4  g 
DAY/DAY  10  1  g 


NON  LINEARITY 
BAND  WIDTH 
MISALIGNMENT 

-  COUPLING 
STABILITY 

“  NO|SI=  1°  '  250  H,) 

-  TORQUE R 

YIELD 


:  2.10'3 
:  100  Hz 
:  5  ARC  MIN. 

:  2.10  *  g  por  "/» 

:  0.5  "It 

:  400  7»  pot  l/wATT 
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Figure  15  -  SIGAL  DEVELOPMENT 


SEVERAL  PROTOTYPES 


SPECIFIC  {  RANGES 


(7)  LABORATORY  TESTS 
(STATIC  AND  DYNAMIC) 


CALIBRATION 


SOFTWARE  TEST 


(D  DYNAMIC  QUALIFICATION 
(FLIGHT  SIMULATOR) 


MISSILE  FLIGHTS 


Figure  16  -  SIGAL  CONCLUSIONS 


-  PROTOTYPE  DEVELOPMENT  OF  SEVERAL  MODELS  FOR  MID  COURSE 
GUIOANCE  AND  CONTROL. 

-  CUSTOM  DESIGNED  SYSTEMS 
.  SHAPE 

.  VOLUME 


.  OPERATIONAL  FLIGHT 
.  OPERATIONAL  MOOES 


LASER  GYROSCOPE  RANDOM  WALK  DETERMINATION 
USING  A  FAST  FILTERING  TECHNIQUE 

hy 

John  G.Mark  and  Alison  Brown 
Litlon  Guidance  and  Control  Systems 
5500  Canoga  Avenue 
Woodland  Hills,  CA  9 1 367  USA 


Abstract 


Laser  gyro  performance  Is  typically  evaluated  by  measuring  the  random 
walk  In  angle  associated  with  an  Instrument.  However,  the  laser  gyro  v.  outs 
angle  In  quantized  pulses  and  the  angle  quantization  has  a  similar  effect  on 
gyro  te$t  data  as  white  noise  In  angle. 

In  order  to  reduce  the  effect  of  quantization  error  on  gyro  test  data, 
Litton  has  developed  a  high  speed  filter  which  outputs  half  second  accumulated 
data  samples.  The  quantization  noise  power  In  these  samples  Is  reduced  by  a 
factor  greater  than  512  while  the  random  walk  characteristics  are  virtually 
unaffected.  High  precision  measurements  of  a  gyro's  random  walk  coefficient 
may  therefore  be  obtained  from  a  small  data  set. 

This  paper  descr1b.es  the  operation  of  this  fast  filtering  technique, 
analyzes  Its  effect  on  gyro  test  data,  and  presents  laser  gyro  test  results 
which  demonstrate  the  technique. 

Laser  Gyroscope  Error  Model 

The  stochastic  errors  In  a  laser  gyro  can  be  modeled  by  a  random  walk  In 

angle,  a  white  noise  In  angle  and  a  quantization  error.  In  Appendix  A  It  Is 

shown  that  quantization  error  has  a  Power  Spectral  Density  identical  to  that 

q2  ^  9 

of  white  noise  In  angle  of  spectral  density  Ng  *  "if  *  'Hz  where  Q  1* 
quantization  level  and  T  is  the  sample  time  interval.  Hence  for  0.5  sec 
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data  and  quantization  Q  ■  0.46  sec.  the  spectral  density  of  the  equivalent 
white  noise  generated  will  be: 

Nq  -  (0.094  sec//Hz)2. 

The  Moot  PSO  of  0.5  sec  simulated  rate  data  from  a  gyro  assumed  to  have  a 
quantization  error  as  above  and  a  random  walk  spectral  density  of  Ng  ■  (0.0015 
deg/  ,/Hr)  Is  shown  In  figure  1.  The  dashed  line  represents  the  random  walk 
level . 


The  Root  PSD  of  gyro  data  with  only  random  walk  In  angle  Is  shown  in  figure  2. 
The  variance  of  the  rate  estimate  o£.  Is  the  area  under  the  square  of  the  Root 

A9 

PSD  in  figure  1.  ^ 


2  nZ  2  —v  2 

where  Og  Is  the  quantization  variance^,  ■  (0.09)  sec  /sec  Is  the 
random  walk  rate  spectral  density  and  T  -  0.5  sec  Is  the  sample  Interval. 

Figures  1  and  2  show  how  for  0.5  sec  samples  the  quantization  error  dominates 
the  measurement  variance  In  Equation  (1).  If  the  sample  time  is  Increased  or 
if  the  quantization  level  0  Is  decreased  then  the  effect  of  the  quantization 
error  on  the  measurement  variance  Is  reduced.  Increasing  the  sample  time 
however,  extends  the  test  time  as  It  takes  longer  to  collect  a  representative 
number  of  samples. 

Because  of  the  presence  of  dither,  bias,  and  secondary  dither,  the  quan¬ 
tization  error  Is  randomized  so  that  It  has  a  similar  frequency  spectrum  as 
white  noise  In  angle.  The  quantization  error  can  therefore  be  reduced  by 
prefiltering  the  data  at  high  frequencies.  This  will  significantly  reduce  the 
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Figure  1.  Root  PSD  of  Simulated  Gyro  Rate  Data  With  Unfiltered 
Random  Walk  and  Quantization 


Figure  2.  Root  PSD  of  Simulated  Gyro  Data  With  Unfiltered  Random  Walk  Only 
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power  of  the  "white  noise"  generated  by  quantization  error  while  only  atten¬ 
uating  slightly  the  random  walk  rate  noise  variance  we  are  trying  to 
observe. 

Moving  Average  Pre-Filter 

A  1,024  Hz  moving  average  pre-filter  is  proposed.  This  filter  consists  of 
five  cascaded  moving  average  filters.  The  configuration  used  has  several 
advantages.  First,  only  additions  and  subtractions  are  required  thereby 
minimizing  necessary  hardware  while  maximizing  execution  speed.  Second,  the 
filters  have  finite  impulse  response.  That  is,  they  achieve  their  final  value 
within  one  sampling  time.  Third,  the  filters  are  "bit  conservative"  leading 
to  exact  arithmetic  results  with  no  truncation  or  rounding.  Finally,  although 
it  is  not  immediately  apparent,  it  is  possible  to  Implement  this  process  with 
only  minimal  data  storage. 

It  will  be  noted  that  only  one  filter  Is  required  to  achieve  the  desired 
reduction  of  quantization  noise.  The  additional  filters  are  used  to  remove 
the  sinusoidal  component  of  dither. 

The  moving  average  filter  Is  implemented  as  follows: 

Fj(K)  •  FjOC-l)  *A9(K)  -  A0(K-2) 

F3(K)  -  F3(K-1)  +  FjW  -  F j(K-8) 

F5(K)  -  F5(K-1)  +  F3(K)  -  F3(K-3Z) 

F7(K)  =  F7(K-1)  *  F5(K)  -  F5(K-128) 

F9(K)  -  F9(K-1)  ♦  F7(K)  -  F7(K-512) 

where  F^*),  F 3( * ) ,  F^*),  F7(*),  and  Fg(*)  are  the  five  filter  outputs  and  K 
is  the  index  of  the  discrete  data  points. 

The  final  output  of  the  moving  average  pre-filter  Is  then  placed  Into  an 
accumulator  to  provide  1/2  second  samples. 
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-25  512 

A6f  =  2  Y  F9(K) 

K-l 


The  overall  transfer  function  of  the  filter  Is  given  by: 

F(Z)  =  2 


-512  4  -2^  2H+1 ) 

-25  1-Z  n  1-2* 

m*o  v  ;-i ' 


(2) 


1-Z' 


1-Z 


Figures  3a  and  3b  show  the  filter  transfer  function  and  response. 
Attenuation  Is  over  25  dB  at  2  Hz  and  Increases  progressively  at  higher 
frequencies.  Over  200  dB  of  attenuation  is  achieved  at  dither  frequencies 
(-400  Hz)  so  that  dither  is  essentially  removed  from  the  output  AOp. 


Figure  3.  Moving  Average  Prefilter  Transfer  Function 


In  Appendix  B,  the  effect  of  the  moving  average  filter  and  accumulator  on 
random  walk  in  angle  and  “white  noise"  in  angle  produced  by  quantization  is 
derived.  The  reduction  of  the  random  walk  rate  variance  is  predominantly  due 

A 

to  the  longest  summation  in  the  moving  average  filter  which  is  of  the  form: 


y(K)  *  y(K-l)  +  X(K)  -  X(K-512) . 


If  the  accumulator  sums  over  m  ■  bl2  samples,  then,  from  Appendix  B,  the  RMS 

A6p 

of  the  filtered  1/2  second  rate  data  -rjr  is  approximately  given  by 
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°IflF 

TT 


(3) 


Simulation  Results 

To  illustrate  the  performance  of  the  moving  average  pre-filter,  gyro  data  was 
simulated  for  a  laser  gyroscope  with  0.46  sec  quantization  and  a  random  walk 
in  angle  of  0.UU15  deq/y/Hr.  Simulation  data  was  generated  as  shown  In 
figure  4  to  demonstrate  the  effect  of  the  filter  on  quantization  error  alone 
and  on  a  combination  of  quantization  error  and  random  walk. 


BIAS  DITHER 


ERROR 

Figure  4.  Model  of  Laser  Gyroscope  Simulation 


Figures  Sa,  b,  c,  and  d  show  the  simulated  data.  The  same  data  set  was  used 
throughout  the  simulations  to  generate  PSD’s.  Figure  5a  Is  a  256  data  point 
sample  of  unfiltered  random  walk.  Figure  5b  shows  the  filtered  quantization. 
The  data  in  figure  5c  represents  the  filtered  random  walk  data.  Comparison 
with  figure  5a  snows  that  while  the  RMS  of  the  random  walk  Is  slightly  reduced 
by  the  filter,  the  data  Is  virtually  unchanged.  Finally,  figure  5d  shows  the 
filtered  sum  of  quantization  and  random  walk.  It  is  clear  that  filtering  has 
reduced  quantization  noise  to  a  level  well  below  random  walk. 
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0.5 


(A) 


-0.5 

0.05 


SAMPLE  OF  0  0015  OEG/^fiR  RANDOM  WALK 
AVE  -+0.0011  DEG/HR  RMS  -  0.1219  DEG/HR 


(B)  0 

Ul 

JC  -0.05 
1.5 


FILTERED  QUANTIZATION  0.46  ARC-SEC 


<C) 


0E 

W  c 


(D) 


-0.5 

0.5 

0 

-0.5 


AVE  -  +  0.0000  DEG/HR  RMS  -  0.0148  DEG/HR 


FILTERED  RANDOM  WALK  FROM  ABOVE 

Aw*v'V<bJ(r,/V*v’'Vw*Wv»~Y'\»i 
AVE  -  +0.0013  DEG/HR  RMS  -  0.0985  DEG/HR 


GYRO  DATA  IE.  FILTERED  SUM  OF  QUANT  AND  RANDOM 
AVE  •  +0.0013  DEG/HR  RMS  •  0.0997  DEG/HR 


16  32 


48  64  80 

TIME  SEC 


96  112  128 


Figure  5.  Filtered  Simulation  Data 


Figure  6  shows  a  plot  of  the  single-sided  Root  PSD  of  the  quantization  error 
on  the  unfiltered  simulated  gyro  data-^|. 


From  Appendix  A  this  Root  PSD  should  fit  the  curve 

/  2  \  1/2 
Jl~  4qQ  sinVtj 

which  is  also  plotted  on  figure  6.  The  expected  RMS  of  the  data  is 


or  3  3  0.376  deg/hr  which  is  close  to  the  actual  RMS  of  the  simulation  data, 
o  =  0.39S  deg/hr.  In  figure  7  the  filtered  quantization  error  is  shown. 

Theory  predicted  that  the  RMS  error  should  have  been  reduced  by  the  Moving 
Average  Filter  by  J  512  to  0.0166  deg/hr.  The  filter  actually  reduced  the  RMS 
to  0.0148  deg/hr,  the  additional  attenuation  being  due  to  the  additive  effects 
of  the  additional  filters  which  were  not  accounted  for  by  equation  (3). 
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Figure  6.  Root  PSO  of  Unfiltered  Quantization  Error 


Figure  7.  Root  PSl)  of  Filtered  Quantization  Error 
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Figure  1  shows  the  Root  PSD  of  the  unfiltered  gyro  data  containing  both  gyro 
random  walk,  which  is  to  be  estimated,  and  quantization  error.  The  Root  PSD 
should  fit  the  curve 

2  )1/2 
sin^nft  / 

which  Is  also  plotted  on  figure  1.  The  RMS  of  the  data  can  be  calculated  from 


T" 


or  ■  0.40  deg/hr  which  was  as  calculated  from  the  data.  The  filtered  gyro 
data  Is  shown  In  figure  8.  As  can  be  seen  this  Root  PSD  closely  approximates 
that  of  a  random  walk. 

The  RMS  calculated  from  this  data  Is  »  0.0997  deg/hr.  Working  backwards 
through  equation  (3)  and  converting  units  gives: 


Nr  -  (0.0863  Deg/Hr/ /Hz) 2 
Nr  «  (0.00144  deg/v/Hr)2 


This  Is  to  be  compared  to  the  value  of  NR  ■  (0.0015  deg/  /Hr)2  which  was  used 
to  generate  the  simulation.  Therefore,  using  the  filtered  gyro  data  to  cal¬ 
culate  the  random  walk  has  Introduced  no  significant  errors  to  the  estimate 
and  has  allowed  a  much  faster  determination  of  random  walk  than  would  have 
been  possible  with  conventional  methods. 
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Figure  8.  Root  PSD  of  Simulated  Filtered  Gyroscope  Data 


SUMMARY  OF  GYRO  DATA 


Table  I  summarizes  data  collected  on  several  gyros  In  a  comparison  test. 

The  results  Indicate  good  correlation  between  the  random  walk  estimated  from 
100  sec  samples  using  auto- variance  in  a  standard  ATP  and  those  using  samples 
which  have  been  processed  by  the  Moving  Average  filter. 


Conclusion 

This  moving  average  filter  has  been  used  at  Litton  for  the  past  year  to 
evaluate  many  Ring  Laser  Gyros.  Filtered  data  samples  have  given  reliable 
random  walk  coefficients  from  the  RMS  of  as  few  as  256  samples  (128  secs)  when 
compared  with  unflltered  data  taken  over  much  longer  times  (as  high  as 
24  hours). 
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TABLE  I 


Gyro 

Serial  No. 

Fast  Filter 

Random  Walk _ 

Estimation  Deg//Hr 

Random  Walk 

From  ATP 

Data  Oeg/yHr 

275 

0.0026 

0.0031 

1232 

0.0020 

0.0020 

959 

0.0011 

0.0009 

1088 

0.0010 

0.0011 

1049 

0.0009 

0.0009 

470 

0.00130 

0.0018 

Simulated  data  has  shown  that  with  2S6  half  second  samples,  the  Moving  Average 
Filter  estimated  a  random  walk  coefficient  of  0.00144  deg/ /Hr  which  was  very 
close  to  the  random  walk  simulated. 
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APPENDIX  A 


Effect  of  Quantization  Error  on  Angle 
The  quantization  error  eK  can  be  modeled  as 

®K  "  "  0K  "  %  +  QK 

where  Qq  Is  the  Initial  quantization  error  and  Is  the  error  Introduced  on 
the  Kth  angle  count. 


Both  errors  are  uniformly  distributed  +1/2  pulse  and  so  have  variance 

2  2 

°q  ■  Q  /12  where  Q  Is  the  quantization  level. 

The  auto-correlation  function  of  8 ,  the  angle  error  Is  given  by: 

■ E  {•>  •>«}  ■ 

This  is  equivalent  to  the  auto-correlation  function  of  a  bias  with  variance 
o^and  white  noise  with  spectral  density  »  To^Z  s'ecZ/Hz  where  T  is  the 
sample  time. 

Incremental  angle  measurements  are  generated  using  the  equation 

A0k  “ 0 k  -0k-i 


2°q  ;K«0 

_  2 


KfO 
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so  the  auto-correlation  function  of  A0R  Is 

*  E  [aSka5k]  “  E  [5K  ]  _2E  [SK§K-l] 


+  E 


[§K-l]  "  2oQ 


A6 ' 


(D  “  yA6(-i)«  E  [Ave 


A6KA6K_ij 


=  E  K  <Vi  -  Va>]  -  V 

YAe(K)  -  OjM-1.0,1 

The  Fourier  Transform  of  TA0(>O.*(NAt)  gives  the  PSD  for  the  Incremental  rate 
measurements  with  quantization  error. 


M. 

At 


w 


|  "s  yK). 

T  K*0  A6 


4  f2_  (sin  J2.) 


For  a  white  noise  process,  the  PSD  could  also  be  obtained  from  the  amplitude 
response  as: 


Ae 

Af 


Ur)  .  °4 


X  (Amplitude  Response)  ■  1-Z' 


°4  u  -  ("))  ■  ^  *•*  (?) 


-i 

"/.l 

.*1 
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APPENDIX  B 


Effect  of  Moving  Avertge  Filter  on  tyro  Data 


The  noise  acting  on  a  gyroscope,  white  noise  In  angle  (due  mainly  to 
quantization)  and  white  noise  in  rate  (random  walk  in  angle)  can  be  modeled  as 
shown  in  figure  8-1. 


sampler  filter  accumulator 

Figure  B-l.  Model  of  Laser  tyro  and  Prefilter  Driven 
by  Random  Walk  and  Quantization  Error 


*  _  A.-'  - 

'-ix  £■*•&.  ;vi 


If  the  white  noise  due  to  quantization  has  variance  a q  ,  then  the  rate 

2 

variance  of  the  filtered  output  of/<  (considering  only  one  element  of  the 
moving  average  filter)  is  given  by: 


JfA*  .  °j!  £  f*(»)  (*> 


where 


-K  -N 

F.(<J>)  *  — r-  Is  the  filtering  function. 

*  Nd-Z'1) 


2*N*r(At)‘ 


T  !*♦ 

J  -  v 


2(K-1)  cos  0  2  cos(IC-l)<t>  J  (2-2  cos  N4>)  d4> 


if  k<N  then  only  2K  survives  in  the  Integral. 

dSNiaxj  1NJWNU  JAO‘>  iv  (l  Dntnm.i  m 


'w.'A 


Ill 


ft 


Thus, 


,*  .  JV 

fA  N2(At)ZK 


Because  the  filter  has  a  finite  output  response  (i.e.,  an  input  signal  will  be 
output  within  one  sampling  time),  the  filtered  quantization  will  have  a  PSD 
function  of  the  same  form  as  the  unfiltered  quantization. 


The  accumulator  alone  will  reduce  the  variance  to— 5 - yso  the  addition  of 

NZ(At)Z 

the  Kth  section  of  the  moving  average  filter  has  reduced  the  variance  of  the 
output  due  to  white  noise  In  angle  by  a  further  1/K.  Adding  In  the  other 
sections  will  further  reduce  the  variance  but  the  most  significant  effect  Is 
Introduced  by  the  section  with  the  greatest  delay,  K. 

If  the  random  walk  In  angle  has  spectral  density  Ng,  then  the  additive  effect 
Aa  ? 

of  the  variance  0*  °k  mj*  The  ^',lterecl  rate  variance  due  to  random 

walk  In  angle  ofll  Is  given  by 


2irK  N 


2ttNcIT 


.  0-z"1)  (1-z  ) 


K  +  X  2(K-j)  cos  Jft 


N  +  2. 

I 


2(N-j )  cos  Jft 


Note  that  only  cosine*  terms  survive,  I.e., 


r vr 

Jmli 


COS*j<frd4>  -  1/2 
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~n 

K  N 


KN  +  2 


which  can  be  summed  exactly  giving 


(K-j)  (N-j) 


Again,  as  other  sections  are  added,  the  variance  Is  reduced  further  but  the 
most  significant  effect  Is  Introduced  by  the  section  of  the  filter  with 
largest  K.  If  K  -  512  and  N  *  512  then  T  *  NAt  *  0.5  sec  and  the  total  fil¬ 
tered  rate  variance  Is: 


a**L 

At 


2 

qA9f 

At 


2c, 


512T 


{»-*} 


It  Is  seen  that  the  quantization  term  is  reduced  considerably  more  than  the 
random  walk  term  to  the  point  where 

2  NR 
S  3T" 


o  A9f 

Tr 


The  PSD  of  may  now  be  easily  formulated.  As  explained  earlier,  filtered 
quantization  has  a  PSD  of  the  same  form  as  unflltered  quantization.  Again 
Invoking  the  finite  output  response  of  the  filter,  we  can  determine  that  the 
random  walk  autocorrelation  function  can  have  only  a  DC  component  and  one 
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additional  symmetric  component.  Further,  the  filter  gain  at  DC  must  be  unity 
since  a  constant  Input  Into  the  filter  will  yield  the  same  constant  output. 

From  the  previous  calculation,  we  find  that  the  DC  term  Is  approximately 
1  -  1/3  *  2/3.  Therefore,  the  PSD  of  the  rate  Is  given  by: 
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THE  SERIES  2000  -  A  MINIATURE  GAS  BEARING  DTG 
FOR  LOW  COST  ST  RAP DOWN  GUIDANCE  AND  CONTROL 
by 
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SMITHS  INDUSTRIES  AEROSPACE  &  DEFENCE  SYSTEMS 
Intagrated  Systems  Group 
Bishops  Cleeve, 
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SUMMARY 

The  development  and  status  of  a  novel  Dynamically  Tuned  Gyroscope  (DTG)  is 
described,  with  particular  reference  to  the  specialised  technology  employed  to  yield  a 
cost  effective  design.  Its  unique  configuration  posesses  a  number  of  important 
advantages  over  those  used  in  conventional  tuned  sensors,  and  allows,  for  the  first 
time,  a  self-acting  gas  bearing  to  be  incorporated  in  a  strapdown  DTG.  Other  features 
of  the  design  include  the  use  of  a  capacitive  pick-off  to  replace  the  traditional 
inductive  version,  a  high  performance  spin  motor  and  a  fully  fabricated  flexure  hinge. 
This  hinge  overcomes  many  of  the  technical  and  commercial  disadvantages  of  the  now 
familiar  ' carved-from-solid'  hinges.  The  paper  discusses  the  problems  that  have 
hitherto  prevented  the  application  of  gas  bearing  technology  to  tuned  sensors  and 
describes  how  these  have  been  overcome  by  the  Series  2000  design.  Current  performance 
of  the  sensor  is  summarised  and  its  advantages  over  contemporary  rate  sensors  are 
compared  with  the  requirements  of  future  guidance  and  control  applications.  These 
include  airborne,  missile,  underwater  and  surface  systems  where  life,  reliability,  ready 
time  and  affordability  are  of  prime  importance. 


1.  INTRODUCTION 

Smiths  Industries  have  manufactured  a  range  of  single  axis  rate  sensors  at  their 
Cheltenham  facility  for  over  forty-five  years.  The  majority  of  these  sensors  have 
utilised  ball  bearing  technology  but  over  the  last  20  years,  a  range  of  miniature  open 
loop  gyros  have  been  developed  in  trttich  the  ball  bearings  have  been  entirely  replaced  by 
gas  bearings  and  flexure  suspensions.  The  introduction  of  this  technology  has  resulted 
in  an  impressive  improvement  in  life  and  reliability,  with  in-service  MTBFs  of  over 
85,000  hours  currently  being  achieved  [ 1  ] - 

In  1979.  a  requirement  was  identified  for  a  low  cost  two  axis  rate  sensor  for 

application  in  a  wide  range  of  current  and  future  strapdown  systems  up  to  and  including 

IN  quality.  The  Dynamically  Tuned  Gyroscope  was  a  natural  candidate  for. this  role 
because  its  principles  were  well  proven  and  the  concept  of  dynamic  tuning  was  accepted 
throughout  the  industry.  However,  a  preliminary  study  revealed  some  serious  limitations 
with  existing  DTG  technology  in  terms  of  both  manufacturing  cost  and  operational  life, 
and  showed  that  these  limitations  were  directly  attributable  to  certain  common  features 
Which  included  the  flexure  hinge,  the  ball  bearings  and  the  general  configuration. 

The  design  philosophy  therefore  centered  around  the  need  to  eliminate  the  spin  axis 

ball  bearings  and  to  introduce  a  self-acting  gas  bearing  to  support  the  rotating  flexure 
hinge  and  rotor  assembly.  This  in  turn  dictated  a  fairly  radical  re-appraisal  of  the 
traditional  rotor/ flexure  hinge  design  which  invariably  overhangs  the  central  flange  and 
bearing  assembly,  and  in  which  the  hinge  is  normally  carved  from  solid  metal.  In 
addition  to  these  specific  technical  considerations,  there  was  an  obvious  advantage  in 
utilising  the  existing  and  proven  gas  bearing  and  flexure  pivot  technology  already 
employed  throughout  the  company's  Series  700  range  of  miniature  gyroscopes  [2]. 

2.  DEVELOPMENT  HISTORY 


Research  and  Development  of  the  Series  2000  DTG,  Fig.l,  commenced  in  1980  and  took 
the  form  of  a  joint  venture  programme  between  Smiths  Industries  and  the  UK  Ministry  of 
Defence.  The  programme  was  carried  out  in  two  phases,  culminating  in  the  manufacture  or 
both  breadboard  and  prototype  hardware  for  joint  evaluation  by  both  parties.  A 
dedicated  team  was  established  at  Cheltenham  to  carry  out  the  design,  development  and 
manufacturing  aspects  of  the  programme  and  close  liaison  was  maintained  throughout  with 
the  Radio  and  Navigation  Department  of  the  Royal  Aircraft  Establishment  at  Farnborouqh. 
Independant  evaluation  of  the  gyro  and  itB  associated  electronicn  has  been  carried  out 
by  the  Radio  and  Navigation  Department  at  Farnborouqh  and  evaluation  of  the  latest 
Improved  prototype  hardware  is  continuing. 

3.  GAS  BEARING  va  DTG 

Design  of  a  qas  bearing  for  application  in  n  I7TG  involves  a  basic  conflict  in 
requirements  and  It  is  perhaps  significant  that  no  previous  attempt  appears  to  have  been 
made  to  combine  these  otherwlee  proven  technologies.  The  gas  bearing  utilises  the 
viscous  effects  of  the  lubricating  gas  to  generate  load  carrying  capacity  and .  by 
definition,  requires  sufficient  gae  to  be  present  in  order  to  establish  reliable 
hydrodynamic  1  ubr  icet  ion .  Conversely,  the  PTfl  per  formas.  •»*  is  degraded  t.y  the  act  Inn  <>t 
gas  damping  torques  on  its  Inertial  elements  end  all  contemporary  sensor  a  of  this  typo 
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ALIGNMENT  PIN 
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(  50mm  ) 
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SPIN 
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1.721w 
(  43.5mm  ) 


SOLDER  PIN  TERMINALS 
<  FLYING  LEAD  AND  CONNECTOR 
OPTIONS  AVAILABLE  > 


FIG  1  THE  SERIES  2000  DTG  FIG  2  OUTLINE  OF 

THE  SERIES  2000  DTG 


INERTIAL 

ELEMENT 


HINGE 


INERTIAL 

ELEMENT 


a)  CONVENTIONAL  CONFIGURATION  b)  SERIES  2000  CONFIGURATION 


FIG  3  COMPARISON  OF  CONVENTIONAL  AND  SFRIFS  2000  DTG  CONFIGURATION 
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are  obliged  to  operate  at  a  reduced  case  pressure  in  order  to  achieve  acceptable  drift 
rates.  The  magnitude  of  the  effect  depends  upon  the  geometry  and  gas  involved  but  case 
pressure  reductions  down  to  one  quarter  atmosphere  are  typical.  This  lower  limit  is 
itself  a  compromise  in  order  to  prevent  deterioration  or  loss  of  the  lubricant  in  the 
ball  bearings.  At  first  sight,  these  conflicting  requirements  appear  to  preclude  the 
application  of  gas  bearings  to  dynamically  tuned  sensors.  The  problem  is  compounded 
when  one  recognises  the  implications  of  the  fact  that  the  inertial  assembly  overhangs 
the  bearing  system  in  a  conventional  DTG  design.  This  overhang  represents  a  difficult 
design  problem  for  any  bearing  system  but  for  a  self-acting  gas  bearing  it  presents 
almost  insurmountable  difficulties. 

To  overcome  these  conflicts,  the  problem  was  approached  from  two  directions.  First, 
using  experience  gained  on  the  Series  700  sensors,  a  gas  bearing  was  designed  to  operate 
at  reduced  ambient  pressures.  Secondly,  a  DTG  design  that  would  operate  successfully  at 
relatively  high  case  pressures  was  evolved  by  careful  aerodynamic  design  of  the  inertial 
element  and  its  immediate  surroundings.  Most  important  of  all,  bearing  overhang  was 
eliminated  by  the  design  of  a  novel  fabricated  flexure  hinge  \dtich  allows  the  gas 
bearing  to  pass  completely  through  its  centre  of  mass.  By  combining  these  features  it 
has  been  possible  to  produce  a  gas  bearing  DTG  that  will  operate  over  a  wide  range  of 
case  pressures  from  sub  to  super  atmospheric.  In  fact,  an  environmental/performance 
trade-off  can  be  achieved  by  simply  selecting  the  case  pressure  on  any  given  mechanical 
design  and  the  manufacturing  advantages  of  this  arrangement  are  obvious.  Furthermore, 
the  Series  2000  bearing  is  specifically  designed  to  use  ordinary  clean  room  air  as  a 
lubricant,  in  common  with  our  existing  range  of  gas  bearings  and  in  contrast  to  those 
used  in  other  gas  bearing  sensors.  The  use  of  air  as  opposed  to  an  inert  cr  rare  gas 
fill  has  considerable  benefits  in  terms  of  ease  of  manufacture  and,  contrary  to  what 
might  be  expected,  results  in  a  more  stable  surface  chemistry  at  the  gas  bearing 
surfaces.  It  also  has  unique  benefits  in  relation  to  the  Boron  Carbide  selected  for  the 
bearing  components,  as  will  be  discussed. 

4.  CONFIGURATION 


The  conventional  layout  of  a  DTG  is  illustrated  schematically  in  Figure  3. a. 

Design  details  vary  somewhat  but  the  basic  configuration  has  changed  little  over  the 
past  twenty  years.  The  overhang  of  the  flexure  hinge  does  not  contribute  to  long 
bearing  life  and  any  sag  of  the  central  shaft  in  its  bearings  is  automatically  sensed  by 
the  pick-off  and  appears  as  an  error  output.  This  arrangement  lacks  symmetry  and  the 
thermal  paths  of  the  torquers  and  spin  motor  are  long  and  are  not  necessarily 
independent . 

In  contrast,  the  configuration  of  the  Series  2000  DTG  is  shown  in  Figure  3.b.  The 
overhang  on  the  spin  bearing  has  been  entirely  eliminated  and  the  design  has  gained  in 
both  symmetry  and  simplicity.  A  relatively  large  gas  bearing  has  been  inserted  through 
the  mass  centre  of  the  flexure  hinge  assembly  and  both  the  hinge  and  the  spin  motor 
driving  ring  lie  between  the  thrust  bearings  on  either  end  of  the  journal  bearing.  Both 
torquers  and  the  spin  motor  are  heat  sunk  directly  to  the  outer  case,  which  also 
provides  magnetic  screening  and  a  hermetic  seal.  This  multi-function  case  also  serves 
to  locate  the  three  modular  sub-assemblies  and  therefore  replaces  both  the  central 
flange  and  the  screening  covers  on  contemporary  designs.  The  one-time  build  around  a 
central  flange  is  replaced  by  three  fully  interchangeable  modules,  each  of  which  can  be 
tested  independently  prior  to  final  assembly  and  the  combined  operation  of  the  three 
modules  can  be  verified  functionally  prior  to  inserting  them  into  the  case. 

The  case  and  mounting  arrangements  are  designed  to  allow  the  user  to  take  the 
fullest  possible  advantage  of  the  internal  heat  sinking  and  the  DTG  can  therefore  be 
embedded  into  a  mounting  block  and  secured  against  the  narrow  mounting  location  with 
three  synchro  style  clamps.  This  preferred  method  of  mounting  allows  external  heat 
sinking  along  the  entire  length  of  the  case  and  reduces  thermal  gradients  to  a  minimum. 
Alternatively  the  sensor  can  be  mounted  on  a  flat  plate  or  bulkhead  in  the  normal 
manner.  Where  multi-axis  packaging  is  required,  the  aspect  ratio  of  the  DTG  is 
important  as  sensors  must  be  mounted  with  their  spin  axes  at  right  angles  and  it  is  the 
overall  size  of  the  cluster  that  is  important  rather  than  the  case  diameter  alone.  The 
Series  2000  has  been  designed  with  this  in  mind  and  makes  maximum  use  of  the  volume 
available  while  minimising  the  overall  size  of  the  cluster.  The  input  axes  are 
identified  by  a  case  label  and,  more  accurately,  by  an  alignment  pin  at  the  terminal  end 
of  the  case. 

5.  GAS  BEARING  DESIGN 


An  H-Form  or  spool  bearing  was  eventually  selected  as  the  most  appropriate 
configuration  for  this  demanding  application.  Other  arrangements  have  their  advocates 
but  an  H-Form  bearing  offers  the  greatest  design  flexibility  and  is  easier  to 
manufacture  than  conical  or  hemispherical  systems  [3].  logarithmic  spiral  pumping 
grooves  are  cut  into  each  stationary  thrust  surface  and  helical  grooving  is  used  on  the 

journal  to  suppress  half  speed  vA\irl  and  to  enhance  the  pumping  action. 

Designing  a  bearing  which  would  operate  satisfactorily  at  both  low  and  high 
pressures  proved  to  be  a  difficult  task.  In  conventional  gyroscopes,  the  wheel  can  be 
operated  at  speeds  of  24,000  RPM  and  above,  but  for  tuned  sensors,  other  constraints 
generally  limit  the  rotational  flfwod  to  about  half  this  value.  This  reduction  in  speed, 
together  with  t  he  r  educed  ambient  pressure  and  t  he  need  to  maintain  a  precisely  define! 

spill  axis  for  ill,,  flexure  hinge  el  li'et  Iveiy  i  e.  i  m  -en  I  lie  iniiul  »ei  of  vn  i  1  ah  1  e  a  lea.llly 
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available  to  the  designer  and  more  subtle  techniques  must  be  employed.  Operation  at  low 
pressures  and  clearances  brings  with  it  an  increased  risk  of  performance  degradation  due 
to  slip  flow  effects  (where  there  are  simply  not  enough  gas  molecules  for  the  gas  to 
behave  as  a  gas)  while  bearings  optimised  for  operation  under  these  conditions  may 
consume  excessive  power  at  higher  pressures.  Finite  difference  analysis  had  been  used 
to  optimise  our  previous  gyro  bearings  and,  based  upon  this  experience,  a  technique  was 
evolved  which  allowed  the  design  of  a  DTG  gas  bearing  to  proceed.  Similarly,  the 
geometric  design  of  the  assembly  was  studied  with  a  view  to  achieving  a  low  and 
reasonably  balanced  specific  loading  on  both  journal  and  thrust  elements.  The  final 
running  clearances  selected  were  below  40  micro  inches  (1  micron)  and  some  measure  of 
the  combined  efficiency  of  the  bearing  and  its  drive  can  be  gained  by  noting  that  the 
total  synchonoua  power  consumption  is  less  than  one  watt  at  a  case  pressure  of  one 
atmosphere. 

All  the  bearing  parts,  Fig. 5,  are  machined  from  solid  Boron  Carbide.  This  is  a  hot 
pressed  ceramic  material  with  outstanding  physical  and  chemical  properties.  It  is  the 
next  hardest  bulk  solid  to  diamond  (3000  VPN),  is  lighter  than  aluminium  (2.52  g/cc)  and 
has  excellent  wear  and  friction  characteristics.  Unlike  most  other  gas  bearing 
materials  it  does  not  require  a  boundary  lubricant  to  achieve  an  acceptable  start/ stop 
life  because  under  rubbing  conditions,  a  combination  of  local  frictional  heating  and 
oxygen  produce  a  soft  dry  lubricant  (boric  oxide)  in  microscopic  quantities  at  the  point 
of  contact.  Boron  Carbide  has  been  used  extensively  in  Smiths  Industries  gas  bearings 
for  many  years  and  bearings  incorporating  this  material  have  demonstrated  over  100,000 
start/ stop  cycles  without  failure.  By  using  the  same  material  for  all  the  bearing 
components,  differential  expansion  problems  are  avoided  but  exceptionally  tight 
machining  tolerances  are  still  required  in  order  to  preserve  the  running  clearances. 

All  parts  are  machined  to  micro-inch  tolerances  and  the  design  allows  the  gas  bearing  to 
be  assembled  and  tested  prior  to  final  assembly  of  the  gyro. 

6.  SPIN  MOTOR 

A  six  pole,  three  phase  hysteresis  motor  is  used  to  drive  the  bearing  and  flexure 
assembly  at  its  nominal  tuned  speed  (N)  of  200  Hz.  The  choice  of  poles  and  phases  was 
influenced  by  the  need  to  minimise  2N  frequencies  which  could  interact  with  the  flexure 
assembly  and  cause  drift  errors.  Motor  design  was  based  upon  the  successful  Series  700 
spin  motor  and  has  been  optimised  to  meet  the  special  requirements  of  a  hydrodynamic 
bearing.  These  include  the  need  to  generate  a  high  instantaneous  starting  torque,  while 
maintaining  efficient  operation  under  synchronous  conditions.  The  Series  2000  motor 
differs  from  traditional  hysteresis  motors  insofar  as  it  has  an  integral  fringing  band 
(flux  bridge)  across  the  teeth  of  the  laminations  and  uses  a  solid,  as  opposed  to  a 
laminated,  hysteresis  ring.  Under  starting  conditions,  most  of  the  torque  is  generated 
by  inductive  currents  flowing  in  the  solid  driving  ring  and  the  motor  only  assumes  the 
characteristics  of  a  true  hysteresis  machine  at  synchronism.  No  ligaments  are  necessary 
and  the  power  leads  are  fed  through  the  centre  of  the  gas  bearing  to  keep  them  well 
clear  of  the  sensitive  inertial  element.  The  spin  motor  module  incorporates  a  magnetic 
shield  and  is  thermally  bonded  to  the  outer  case. 

7.  FABRICATED  FLEXURE  ASSEMBLY 


The  now  traditional  method  of  forming  the  flexure  hinge  is  to  start  with  a  solid 
block  of  metal  and  carve  it  away  by  grinding  and  spark  erosion  techniques  to  establish  a 
two  axis  Hookes  Joint.  This  method  of  manufacture  has  many  disadvantages.  Grain  flow 
cannot  be  aligned  along  the  length  of  each  flexure  and  local  defects  coincident  with  the 
neck  of  the  flexure  can  result  in  an  unacceptable  scrap  rate.  Electro-discharge 
machining  (EDM)  leaves  a  poor  granular  finish  and  even  if  this  is  locally  polished, 
sub-surface  damage  remains  and  the  flexure  is  weakened.  The  design  must  allow  access  to 
all  areas  for  machining  and  the  final  tolerance  build-up  is  normally  high.  Since  sprinq 
rate  is  proportional  to  the  third  power  of  the  flexure  thickness,  the  rate,  and  hence 
the  tuned  speed  can  vary  in  practice  by  up  to  t30%.  Mechanical  adjustment  is  therefore 
required  after  assembly  in  order  to  keep  the  tuned  speed  within  acceptable  limits. 
Finally,  the  manufacturing  technique  is  expensive  and  does  not  readily  lend  itself  to 
large  scale  production.  A  study  of  patent  applications  shows  a  trend  toward  a 
semi- fabricated  construction  in  recent  years  and  suggests  that  the  limitations  of  the 
*  carved- from- sol id '  approach  have  been  recognised,  though  not  all  these  ideas  have  been 
translated  into  production  hardware. 

The  flexure  hinge  used  in  the  Series  2000  design  is  fully  fabricated  from  some  51 
separate  parts  and  is  based  upon  an  unusual  'pins-held'  flexure  pivot  that  has  been  used 
in  our  miniature  gyroscopes  for  many  years.  Here,  the  philosophy  wan  to  fabricate  the 
hinge  from  a  large  number  of  relatively  simple  components  but,  since  many  are  identical, 
the  final  assembly  contains  only  six  different  parts.  The  flexure  hinge.  Fig, 6,  takes 
the  form  of  three  concentric  co-axial  rings,  interconnected  via  two  pairs  of  cross 
spring  flexure  pivots  to  produce  a  universal  joint.  Each  pivot  in  the  size  of  a  match 
head  and  is  fabricated  from  twelve  components.  The  pivots  are  buried  within  the  wall 
thickness  of  the  three  rings,  making  a  very  compact  assembly  which  is  later  cemented 
around  the  outside  of  the  gas  bearing.  The  two  fl^xuro  blades  in  each  pivot  are 
photo-etched  from  precision  rolled  strip  whose  thi^kne^s  Is  control  lei  to  *60  micro 
inches  (tl.5  micron)  and  the  relative  position  of  the  blades  is  controlled  by  parallel 
pitta  which  fit  into  accurately  machined  holes  in  o  u*h  of  the  twv'  end  f  langes. 
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Fabrication  is  achieved  by  chemically  depositing  a  very  thin  layer  of  a  special 
alloy  material  onto  certain  components  prior  to  assembly.  The  self  jigging  assembly  is 
then  raised  to  a  high  temperature  under  vacuum  there  the  alloy  melts  and  is  pulled  into 
all  the  joint  areas  by  capillary  action.  Surface  tension  forces  in  the  liquid  metal 
then  centraliee  and  align  all  the  individual  components  and  both  blades,  pins  and  pivot 
flanges  float  into  their  correct  relative  positions.  Careful  control  of  the  process 
parameters  allows  limited  penetration  of  the  liquid  braze  into  the  substrate  structure. 
This  increases  the  strength  of  the  joint  and  allows  some  of  the  base  material  to  go  into 
solution,  thus  raising  the  melting  point  of  the  braze  and  permitting  successive  brazing 
operations  to  be  completed  without  disturbing  the  mechanical  integrity  of  the  original 
joints.  Once  all  the  joints  have  been  established,  further  heat  treatment  sequences  are 
used  to  condition  the  magnetic  and  mechanical  properties  of  the  structure  and  lastly,  a 
controlled  cooling  sequence  assures  the  final  assembly  is  completely  free  from  residual 
stress . 

Designing  the  local  geometry  to  take  advantage  of  surface  tension  and  capillary 
effects  is  no  easy  task  but  the  benefits  are  considerable.  The  exact  amount  of  braze 
material  required  to  form  each  of  the  104  joints  in  the  hinge  is  automatically  provided, 
with  the  surrounding  surfaces  acting  as  a  braze  reservoir.  By  using  surface  tension 
forces  to  align  the  individual  components  at  high  temperature,  manufacturing  and 
assembly  stresses  are  virtually  eliminated  and  the  accuracy  of  the  finished  hinge  is  far 
higher  than  could  ever  be  achieved  by  relying  on  the  machining  tolerances  of  the  piece 
parts  themselves.  The  local  anchor  point  geometry  of  each  flexure  blade  is  defined  by 
the  shape  of  the  final  braze  meniscus  and  can  be  closely  controlled  via  the  brazing 
temperature.  [Where  flexures  are  formed  from  solid  or  fabricated  by  conventional  slot 
or  abutment  techniques,  the  anchor  point  geometry  can  vary  considerably  from  part  to 
part  and  cause  corresponding  variations  in  spring  rate.]  Because  the  flexure  blade  is 
formed  from  precision  rolled  strip  prior  to  assembly,  its  physical  characteristics  can 
be  assured  with  a  very  high  degree  of  confidence  and  the  grain  flow  orientation  can  be 
optimised  for  each  blade.  Similarly,  the  blade  surface  is  highly  polished  and  free  from 
both  surface  and  sub-surface  metallurgical  damage  that  could  act  as  a  stress-raiser  and 
reduce  its  strength.  Bach  blade  is  of  constant  section  and  does  not  need  to  be  'necked' 
to  achieve  the  required  spring  rate.  Each  pivot  is  a  true  cross-spring  device  and  it  is 
known  that  cross  spring  suspensions  have  important  performance  advantages  over  other 
forms  of  suspension  vftten  applied  to  dynamically  tuned  sensors. 

This  unique  design  and  manufacturing  technique  allows  a  very  compact  flexure  hinge 
assembly  to  be  produced,  with  a  bore  large  enough  to  take  a  hydrodynamic  gas  bearing. 

The  Figure  of  Merit  (a  dimensionless  parameter  indicating  the  'goodness'  of  the  design) 
is  very  high  and  the  effect  of  mls-tuning  errors  correspondingly  small.  Finally,  the 
method  of  manufacture  readily  lands  itself  to  large  scale  production  because  many 
flexure  assemblies  can  be  processed  simultaneously. 

8.  TORQUER  DESIGN 


The  torquer  is  a  conventional  D'Arsonval  configuration,  using  a  segmented  Samarium 
Cobalt  magnet  and  a  high  permeability  return  path.  Encapsulated  torquer  coils  are  used 
to  improve  both  the  structural  strength  and  the  aerodynamic  cleanliness  of  the  design. 
Experimental  work  showed  that  capture  rate  would  be  limited  by  thermal  distortion  of  the 
torquer  coils  rather  than  by  electrical  failure  and  the  mounting  and  encapsulating 
arrangements  are  designed  to  reduce  these  effects  to  a  minimum.  Considerable  effort  was 
directed  at  optimising  the  magnetic  design  of  the  torquer  to  obtain  the  best  possible 
capture  rate  consistent  with  the  lowest  practicable  magnetic  leakage.  To  this  end. 
Finite  Element  analysis  was  used  to  predict  the  flux  patterns  within  the  magnetic 
circuit  and  the  field  strengths  for  comparison  with  those  measured  on  experimental 
hardware.  The  Finite  Element  analysis  was  carried  out  on  a  large  mainframe  computer  and 
the  results  subsequently  used  for  the  calculation  of  capture  rate,  inertias  and  masses. 
Optimisation  of  the  torquer  cannot  be  carried  out  in  isolation  and  must  of  course  be 
considered  in  conjunction  with  both  gas  bearing  and  flexure  design. 

9.  THE  CAPACITIVE  PICK-OFF 


Inductive  pick-offs  are  used  extensively  in  existing  strapdown  DTGs.  Their  main 
disadvantage  is  that,  however  careful  the  design,  they  inevitably  exert  electro-magnetic 
torques  upon  the  Inertial  element.  An  inductive  pick-off  was  originally  considered  for 
the  Series  2000  but  it  was  soon  apparent  that  the  symmetrical  design  of  the  gyro  readily 
lent  itself  to  a  capacitive  version. 

The  resulting  two-axis  capacitive  pick-off  is  mechanically  simpler  than  the 
traditional  inductive  version  and  'frresents  an  aerodynamical  1  y  'clean'  surface  to  the 
spinning  inertial  element.  Wlndaqe  forces  acting  on  the  inertial  element  are  small  and 
electrical  forces  are  negligible. 

The  stationary  pick-off  plate  is  manufactured  by  a  photo-etching  process  and  is 
attached  to  one  of  the  three  modules  adjacent  to  the  torquer  coils.  Movement  of  the 
spinning  inertial  element  about  either  input  axis  causes  a  change  in  air  gap  and  this 
change  is  detected  by  one  pair  of  capacitor  plates  positioned  across  the  diameter  of  the 
wheel.  Pick-off  sensitivity  varies  inversely  as  the  second  power  of  the  air  gap  length 
and  the  overall  design  of  the  sensor  allows  thin  mean  gap  dimension  to  he  closely 
controlled.  Mechanical  contact  between  the  stationary  pick-off  plate  and  the  spinning 
surface  is  highly  undesirable  and  a  etop  disc  In  therefore  fitted  on  the  opposite  side 
of  the  Inertial  element  to  limit  Its  angular  travel  to  about  10  ml  1 1 Irad tana . 
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FIG  8  FLEXURE  PIVOT  ASSEMBLY 
PRIOR  TO  FINAL  BUILD  OF 
FLEXURE  HINGE 


FIG  9  FINITE  ELEMENT  COMPUTER 
PLOT  OF  TORQUER  FIELD 
DISTRIBUTION 


SPIN  INERTIAL  CAPACITIVE 

MOTOR  ELEMENT  PICK  OFF 


FIG  10  SCHEMATIC  OF  SERIES  2000  DTG  AND  ASSOCIATED  ELECTRONICS 
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This  atop  disc  apina  with  tha  flax or a  assembly  to  eliminate  rubbing  contact  during 
overload  conditione.  The  pick-off  ie  energiaed  from  external  electronica  and  de-coding 
circuitry  ia  incorporated  in  header  electronics  vrtiich  is  sealed  within  the  outer  case. 

10.  ELECTRONICS 


Supporting  electronica  waa  developed  in  parallel  with  the  OTG  hardware  and  ia  shown 
schematically  in  Figure  10.  The  purpose  of  the  electronics  is  to  generate  a  drive 
waveform  to  the  spin  motor,  to  energise  and  decode  the  capacitive  pick-off  and  to 
provide  the  X  and  Y  capture  loope  for  the  torquer .  Spin  motor  drive  is  derived  from  a 
4  MHz  crystal  oscillator  and  can  be  adjusted  digitally  in  0.1  Hz  increments.  The 
three-phase  output  to  the  motor  windings  comes  directly  from  a  totem  pole  configuration 
of  FBT  power  amplifiers  and  the  drive  frequency  is  compared  with  the  derived  reference 
via  a  phase  locked  loop  and  Shift  register  system.  Pick-off  decoding  is  accomplished 
within  the  header  electronics  and  pick-off  energisation  and  bias  voltage  are  generated 
within  the  buffer  electronics  %diich  is  sited  close  to  the  gyro.  The  X  and  Y  capture 
loop  circuits  are  identical  and  in  the  normal  High  Rate  Loop  mode,  the  torquer  coils  are 
current  driven  to  assist  in  overcoming  heating  effects  at  high  rates.  Where  Low  Rate 
Loops  are  provided  for  test  purposes,  voltage  is  fed  directly  into  the  torquer  coils 
because  the  heating  effect  is  minimal. 

The  philosophy  of  the  supporting  electronics  is  illustrated  in  Figure  11.  For  test 
and  evaluation  purposes,  the  Basic  Test  Electronics  is  supplied  in  two  small  boxes 
complete  with  interconnecting  cables  and  connectors.  Both  high  and  low  rate  loops  are 
provided,  together  with  ample  test  points  and  associated  facilities.  These  modules 
contain  plug-in  circuit  boards  that  can  be  exchanged  for  or  supplemented  by  additional 
boards  to  modify  the  performance  or  characteristics  of  the  system.  Individual  circuit 
cards  are  available  separately  to  allow  the  customer  to  incorporate  them  into  his  own 
equipment  and  are  referred  to  as' the  ‘standard  production  electronics'.  However,  it  is 
appreciated  that  for  some  applications,  various  'non-standard'  electronics  will  need  to 
be  developed  to  suit  particular  packaging  and/or  performance  requirements  and  these  are 
discussed  with  the  customer  concerned  as  appropriate.  The  current  production 
electronics  uses  both  CMOS  and  MOSFET  technology.  Hybrid  power  amplifiers  are  used  in 
the  capture  loops  but  the  remainder  of  the  circuitry  is  discrete.  Both  the  capture  and 
motor  circuitry  are  contained  on  small  Eurocards  and  the  buffer  card  measures  86  mm  x 
54  inn.  Smaller  discrete  electronics  have  recently  been  developed  to  meet  specific 
customer  requirements  and  the  intention  is  to  fully  hybridise  both  internal  and  external 
electronics  in  the  near  future.  ±15  V  and  ±30  V.  D.C.  power  inputs  are  standard. 

To  date,  all  performance  requirements  have  been  met  without  the  phase  locking, 
anti-hunting  circuitry  and  various  other  refinements  that  are  common  to  most 
contemporary  DTGs,  but  the  basic  electronics  described  above  have  provision  to 
incorporate  such  refinements  at  a  later  date  if  desired. 

11.  THERMAL  DESIGN 

Influenced  perhaps  by  suggestions  that  certain  ' first  generation'  DTGs  dissipated 
1  KW  under  maximum  capture  conditions,  considerable  attention  was  paid  to  the  thermal 
design  of  the  Series  2000.  Choice  of  materials  was  dictated  in  many  instances  by  the 
need  to  minimise  thermal  mis-match,  and  all  adhesive  joints  include  an  expansion 
reservoir  to  assure  the  integrity  of  the  joint  under  ambient  temperature  variations. 

Heat  transfer  across  the  gas  bearing  clearance  is  good  and  bearing  dissipation  can ,  for 
all  practical  purposes,  be  ignored.  The  Series  2000  configuration  allows  the  spin  motor 
stator  to  be  in  close  thermal  contact  with  the  outer  case  and  the  very  low  quiescent 
power  dissipation  of  the  motor  (<1  watt)  is  therefore  easily  accommodated.  Power 
dissipation  in  the  header  electronics  is  also  negligible  and  this  leaves  the  torquer  as 
the  major  internal  heat  source. 

Given  that  the  magnetic  design  of  the  torquer  is  made  as  efficient  as  possible,  the 
major  problem  is  to  extract  the  surplus  heat  from  the  torquer  windings  and  direct  it  to 
the  outside  world  via  the  shortest  practical  route.  In  the  Series  2000,  this  is 
accomplished  by  bonding  the  four  torquer  coils  to  a  solid  copper  ring,  which  is  in  turn 
thermally  bonded  to  the  outer  case.  This  provides  a  very  short  heat  path  of  high 
thermal  conductivity  and  ensures  low  thermal  gradients  even  under  maximum  torquing 
conditions.  In  terms  of  OTG  performance,  actual  temperature  is  less  significant  than 
temperature  gradient  and  the  ability  of  the  Series  2000  design  to  operate  at  relatively 
high  case  pressures  is  an  advantage  in  this  respect.  The  inertial  element,  gimbal  and 
flexure  hinges  rely  almost  entirely  upon  windage  effects  to  maintain  them  at  an  even 
temperature  and  the  presence  of  a  significant  atmosphere  within  the  case  is  therefore 
beneficial.  As  previously  discussed,  the  cylindrical  case  of  the  OTG  can  be  mounted 
with  its  entire  length  in  contact  with  a  heat  sink,  and  this  further  minimises  internal 
temperature  gradients. 

The  combined  effect  of  the  above  features  has  yielded  n  OTG  with  excellent  thermal 
characteristics  and  with  verylow  self  heating  in  comparison  with  other  designs.  In 
terms  of  ambient  temperature,  the  gaa  bearing  frees  the  design  from  limitations  imposed 
by  the  lubricants  in  conventional  ball  bearings  and  the  Series  2000  will  therefore 
operate  over  a  wide  ambient  temperature  range - 
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D.  VARIOUS  ‘NON-STANDARD’ 
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FIG  11 


SUPPORT  ELECTRONICS  FOR  THE  SERIES  2000  DTG 


PRINT  RESIST 
PATTERN 


REMOVE  ^ 
RESIST 


STREAM  OF  ELECTRONS  BETWEEN  CATHODE 
AND  ANODE  COLLIDE  WITH  ARGON  ATOMS 
TO  FORM  IONISED  PLASMA.  PLASMA  IONS  THEN 
ACCELERATE  TO  CATHODE  AND  COLLIDE  WITH 
EXPOSED  WORKPIECE,  REMOVING  CLUSTERS  OF 
^  MOLECULES  WHICH  DEPOSITE  ON  CHAMBER  WALLS. J 

FIG  12  SCHEMATIC  OF  ION-MACHINING  PROCESS  USED 

TO  CUT  PUMPING  GROOVES 
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12.  WVNUFACTURING  TECHNOLOGY 

Series  2000  manufacture  involves  a  number  of  specially  developed  techniques  and 
equipments.  Gas  bearing  parts  are  machined  from  solid  carbide  blanks  using  high 
precision  diamond  grinding,  lapping  and  polishing  equipment.  The  final  bearing  surfaces 
are  achieved  by  Thermochemical  Polishing  in  vhich  material  is  stripped  from  the  surface 
by  a  thermal  oxidation  process  to  leave  a  very  highly  polished  substrate  that  is  smooth 
to  a  molecular  level  and  free  from  normal  polishing  scratches.  Pumping  grooves  are 
formed  in  the  bearing  surfaces  by  screen  printing  a  special  resist  material  onto  the 
component  and  then  cutting  all  the  grooves  simultaneously  by  Ion-Machining. 

Ion-Machining  [4],  may  be  likened  to  sand  blasting,  but  using  atomic  particles  in  place 
of  the  sand  and  an  electrical  potential  instead  of  high  pressure  air.  It  produces  high 
definition  grooves,  typically  80  microinches  (2  microns)  deep  whose  depth  can  be 
controlled  within  close  limits  and  vtoich  are  free  from  all  stress  and  machining  debris. 
Ion-Machining  is  carried  out  in  an  argon  plasma  within  a  vacuum  chamber  and  many 
components  can  be  machined  simultaneously  at  a  typical  machining  rate  of  one  micro  inch 
per  minute.  Ion-Machining  is  an  elegant  process  well  suited  to  volume  production  and  is 
considered  to  be  the  only  practicable  way  of  machining  accurate  pumping  patterns  in 
ultra  hard  materials  such  as  Boron  Carbide. 

The  manufacturing  technique  for  the  flexure  hinge  has  been  briefly  described  in 
Section  7  and  relies  initially  on  conventional  manufacturing  technology.  However, 
special  equipment  had  to  be  developed  to  position  and  size  the  holes  for  the  flexure 
support  pins  and  the  final  heat  treatment  sequences  are  carried  out  automatically  in  a 
computer  controlled  vacuum  furnace.  Assesibly  of  the  piece  parts  is,  at  the  present 
time,  a  manual  operation  carried  out  under  binocular  microscopes,  but  the  design  is 
entirely  self  jigging  and  no  fixturing  is  necessary  during  heat  treatment. 

The  manufacturing  technique  for  the  torquer  coils  is  of  interest  because  it  allows 
a  high  packing  density  to  be  achieved  and  suiximises  the  amount  of  copper  within  the 
torquer  air  gap.  Two-dimensional  coils  are  first  wound  on  a  low  melting  point 
disposable  metal  former  and  this  is  then  rolled  to  form  the  familiar  three-dimensional 
saddle-shaped  arrangement  prior  to  curing  the  impregnant  and  finally  removing  the  metal 
support. 

The  specialised  manufacturing  facilities  are  supported  by  corresponding  metrology 
equipment  capable  of  verifying  components  machined  to  micro-inch  tolerances.  As  for  the 
manufacturing  plant,  much  of  this  metrology  equipment  was  either  developed  or  adapted 
in-house.  Considerable  experience  in  machining  exotic  materials  was  already  available 
within  the  company  but  many  new  skills  had  to  be  learnt  to  cope  with  the  wide  range  of 
different  materials  used  throughout  the  Series  2000  DTG. 

13.  ASSEMBLY  AND  TESTING 


The  modular  design  of  the  Series  2000  OTG  is  a  considerable  advantage  during  the 
build  stage,  when  a  suspect  module  can  be  quickly  replaced  prior  to  recta fication. 

Each  of  the  three  major  modules  are  built  apd  tested  separately  prior  to  fitting 
together  for  the  first  time.  Preliminary  functional  testing  of  this  three-part  assembly 
can  be  carried  out  prior  to  fitting  the  outer  case,  which  is  initially  sealed  with  an 
"O'  ring.  Final  hermetic  sealing  is  completed  at  a  later  stage  once  provisional 
performance  data  has  been  obtained.  A  comprehensive  sequence  of  burn-in  and  testing  is 
carried  out  throughout  all  stages  of  build.  Multi-position  and  rate  table  testing  are 
used  to  establish  the  quality  of  the  finished  sensor  and  much  of  this  data  is  obtained 
and  recorded  automatically  via  computer  driven  data  logging  equipment.  Gas  bearing 
assembly  must  be  carried  out  under  stringent  Class  100  conditions  involving  specialised 
cleaning  and  handling  techniques  but  once  the  module  containing  the  gas  bearing  is 
assembled,  all  subsequent  work  can  be  completed  in  a  normal  gyro  clean  room  environment. 
Cements  and  adhesives  are  used  extensively  throughout  the  sub-assembly  sequence  and  post 
assembly  cleaning  includes  vacuus  baking  to  remove  all  traces  of  volatile  contaminants 
that  could  degrade  bearing  performance.  Although  the  use  of  screw  threads  has  been 
reduced  to  an  absolute  minimum  in  this  design,  it  is  nevertheless  a  fully  repairable 
item . 


14.  ADVANTAGES  OP  THE  SERIES  2000 


The  advantages  claimed  for  DTGs  in  general  are  listed  in  Figure  14  and  the  major 
features  of  the  Series  2000  design  are  summarised  in  Figure  15.  They  are  largely  self 
explanatory  but  acme  conxnent  is  in  order. 

frequent  claims  have  been  made  that  OTG  performance  is  largely  independent  of  spin 
bearing  quality  because  the  inertial  elements  are  effectively  de-coup] ed  from  the 
bearing  and  drive  system  by  the  flexure  hinge.  However  true  this  may  be  in  theory,  it 
is  certainly  not  true  in  practice.  Our  own  experience  confirms  that  performance  is  not 
independent  of  the  spin  bearings  and  that  a  very  significant  improvement  is  obtained 
«rtten  ball  bearings  are  replaced  by  a  gas  bearing.  The  gan  bearing  has  proved  easier  to 
assemble  than  corresponding  bell  bearing*  (which  require  rather  critical  pre-loading  and 
alignment  arrangements)  and  has  tha  following  advantages  over  the  latter,  viz: 
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DYNAMICALLY  TUNED  GYROSCOPES 

•  TWO  AXIS  RATE  SENSING 

•  DRY  CONSTRUCTION  -  NO  UQUIOS 

•  I.N.  POTENTIAL  AT  RELATIVLY  LOW  COST 

•  STRAPDOWN  OR  PLATFORM  CAPABILITY 

•  SMALL  COMPACT  SIZE 

V _ 


FIO  13  SUB  ASSEMBLY  MODULES 
PRIOR  TO  FINAL  ASSEMBLY 


FIG  14  ADVANTAGES  OF 

DYNAMICALLY  TUNED  GYROS 
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SERIES  2000  PERFORMANCE 


CAPTURE  RATE 

ContlnuoiiB 

200  dR  l 

InttfmIMinl 

420  dag/ a 

DRIFT 

Random- In-run 

0.1  d««  h  (1(T) 

Run-to-Run 

1  dag  h  (lO) 

10  d«s  h 

10  d«s  h 

NON-LINEARITY 

<  0.0 1  dag 'a 

HVSTTRFftlS 

«  0.01  d»«  « 

SCALE  FACTOR  REPEATABILITY 

0.01% 

RUN-UP  TIME 

2%  a 

QUIESCENT  POWER 

<  1  wall 

DYNAMIC  RANGE 

3.3  *  10’ 

FIG  15  FEATURES  OF  THE 
SERIES  2000  DESIGN 


FIG  16  TYPICAL  PERFORMANCE 
ACHIEVED  TO  DATE 
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*  Unlimited  Storage  Life. 

*  Very  high  operational  life  and  MTBF 

*  Very  low  acoustic  noise 

*  Rapid  run-up  over  a  wide  temperature  range 

*  Highly  stable  and  repeatable  spin  axis  definition 

1 5 .  TYPICAL  PERFORMANCE 


Typical  performance  currently  being  achieved  from  development  hardware  in  tests  at 
RAE  and  at  Smiths  Industries  is  summarised  in  Figure  16.  the  performance  compares 
extremely  favourably  with  that  of  comparable  tuned  sensors  in  this  class  and  this 
combination  of  drift  performance  and  capture  rate  is  attractive  over  a  wide  range  of 
applications.  This  level  of  performance  has  been  achieved,  as  previously  stated,  with 
relatively  basic  electronics  and  after  a  fairly  short  development  time  and  is  clearly 
capable  of  further  improvement. 

The  current  design  standard  is  maturing  rapidly  and  unit-to-unit  performance 
variations  are  small.  Each  gyro  has  an  internal  temperature  sensor  that  is  user 
accessible,  allowing  external  compensation  or  characterisation  to  be  applied  as 
required.  Extensive  testing  to  date  has  shown  performance  variation  with  temperature  to 
be  exceptionally  repeatable  and  predictable,  thus  allowing  accurate  modelling  of  these 
sensor  charactistics  within  a  typical  processor  based  system.  In-run  drift  performance 
depends  to  same  extent  upon  case  pressure  and  can  be  traded  against  other  parameters  as 
previously  discussed. 

16.  APPLICATIONS 


DTGs  in  general  are  already  being  specified  for  a  wide  range  of  applications 
ranging  from  inertial  navigation  to  missile  control  and  the  unique  attributes  of  the 
Series  2000  design  are  expected  to  further  broaden  this  range  of  opportunities. 

Pigure  17  details  the  range  of  applications  foreseen  in  the  immediate  future,  many  of 
which  are  under  active  discussion  with  potential  users.  The  Series  2000  OTG  is 
currently  being  evaluated  in  a  medium  grade  inertial  navigation  system  and  in  this  type 
of  application,  the  high  MTBF  available  from  the  gas  bearing  is  usually  an  important 
consideration.  For  applications  involving  missiles,  munition  dispensers  and 
sub-munitions,  long  storage  life  is  becoming  increasingly  important  and  here  again,  the 
inherent  characteristics  of  the  self  generating  gas  bearing  make  it  the  obvious  choice 
for  this  role.  Similarly,  rapid  run-up  time  across  a  wide  range  of  temperatures  can 
often  be  a  deciding  factor  in  the  choice  of  sensors  for  tactical  weapon  systems  and  once 
again,  gas  bearing  technology  has  few  equals  in  this  respect.  In  applications  involving 
underwater  weapons  and  systems,  the  very  low  acoustic  noise  generated  by  a  hydrodynamic 
gas  bearing  (approximately  1/50  of  the  mean  spectral  noi3e  density  of  a  high  quality 
bail  bearing)  can  be  a  deciding  factor. 

The  current  emphasis  on  cost  effective  guidance  and  control  systems  places 
particular  constraints  on  the  primary  sensors,  especially  in  terms  of  affordability. 
Sensor  performance  may  be  superb,  but  if  it  is  achieved  by  lengthy  fiddling  and  tweaking 
and  is  consequently  unaffordable,  the  system  designer  will  be  obliged  to  select  a  lesser 
device  or  to  seek  a  solution  elsewhere.  The  Series  2000  concept  is  an  attempt  to  reduce 
the  need  for  these  protracted  adjustments  by  applying  proven  state-of-the-art  technology 
at  the  design  and  manufacturing  stages,  so  increasing  the  price/ per formance  ratio  of  the 
final  product.  Life  and  reliability  have  been  the  traditional  'Achilles  Heel*  of 
rotating  mass  sensors  and  have  driven  the  continuing  search  for  potentially  reliable 
alternative  devices.  The  gas  bearing  effectively  removes  this  limitation  from  the  tuned 
sensor  and  allows  it  to  compete  on  more  than  equal  terms  with  contemporary  optical  and 
solid  state  rate  sensors  vrttose  size,  cost  and  complexity  are  frequently  unfavourable  by 
comparison. 

17.  CURRENT  STATUS 


Research  and  development  of  the  Series  2000  DTG  is  complete  and  the  sensor  has  now 
entered  production  at  Cheltenham.  The  first  production  version  is  designated  the  2001 
DTG  and  will  form  part  of  a  family  of  DTGs  intended  for  both  general  and  specific 
applications.  Pilot  production  of  customer  evaluation  hardware  commenced  towards  the 
end  of  1903  and  performance  testing  of  prototype  gyros  continues  in  order  to  consolidate 
the  data  base  and  identify  areas  of  future  development. 

18.  FUTURE  POTENTIAL 

It  is  clear  that  the  basic  mechanical  and  electronic  design  has  potential  for 
improvement.  Drift  Improvement  down  to  a  true  IN  level  should  he  achievable  in  the 
foreseeable  future  and  certain  other  parameters  can  be  tailored  to  meet  specific 
applications  as  required.  It  is  envisaged  that  these  improvements  will  be  achieved  by 
relatively  small  modifications  to  the  existing  hardware  and  building  techniques  rather 
than  by  changes  to  the  basic  design.  A  micro-miniature  (less  than  one  inch  diameter) 
version  is  already  under  consideration  and  this  would  be  capable  of  capturing  input 
rates  in  excess  of  1000  deg/s  and  would  have  an  energisation  time  of  less  than  one 
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FIG  17  POTENTIAL 

APPLICATIONS  FOR  THE 
FOR  THE  SERIES  2000  DTG 


second.  Quit*  apart  from  the  obvious  advantages  of  size,  weight,  capture  rate  and  ready 
time,  the  dimensions  and  design  of  this  sensor  will  ensure  it  is  rugged  enough  to  cope 
with  the  most  extreme  environmental  conditions,  as  typified  by  vertical  launch  and 
vectored  thrust  missile  systems. 
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SYSTENE  DE  GUIDAGE  A  6YB0LASER  POUR  MISSILES  A  MOYENNE  PORTEE 

GYROLASER  GUIDANCE  SYSTEM  FOR  UEOIUM  RANGE  MISSILES 

par 

Bernard  de  Salaberry 
Chef  du  Ddpartement  Inertie  et  Optique 
Socidtd  Frangaise  d'EquIpements  pour  la  Navigation  Adrienne  (SFENA) 
Aerodrome  de  Villacoublay 
78141  VELIZY-VILLACOUBLAY  -  FRANCE 


La  technologie  du  gyrolaser  a  maintenant  dvolud  de  sorte  que  ce  capteur  est  devenu  utilisable  sur 
des  missiles  tactiques  de  moyenne  portde.  Aprfes  une  presentation  des  performances  requises  pour  les 
capteurs,  on  trouvera  une  description  des  capteurs,  gyrolasers  et  accdldromdtres,  retenus  pour  rdaliser  un 
ensemble  inertie!  destind  au  guidage  et  au  pilotage  de  tel  missile.  Les  probldmes  de  filtrage  du  bruit  sur 
les  signaux  de  lecture  des  gyrolasers  sont  examines. 

ABSTRACT 

LeutA  gyAO  technology  It  now  developed  to  the  point  u/heAe  thii  type  of  ineAtinl  iemoA  can  be  cued 
on  medium-Aange  tactical  miiiilei.  A fteA  outlining  the  peAfoAmancei  AequiAed  (oa  theie  iemoAi,  we  ihalt 
go  on  to  deiCAibe  the  laieA  gyAOA  and  acceteAometeAi  c hoien  to  comtAuct  an  ineAtial  iy item  deagned  (oa 
the  guidance  and  conteol  of  ouch  a  miiiile.  The  pnoblemi  of,  filtening  no-Lie  on  the  laieA  gyAO  Atadout 
iignali  will  alio  be  examined. 

1.  INTRODUCTION 

Au  cours  des  vingt  derniferes  anndes,  les  missiles  tactiques  ont  subi  une  evolution  profonde  et  une 
grande  diversification,  tant  dans  leur  tai Tie  que  dans  leur  portde,  leur  mission  et  leurs  performances. 

Du  moment  qu'ils  dtaient  guidds,  ils  dtaient  dqulpds  de  senseurs  inertiels  fournissant  des 
rdfdrences  pour  leur  guidage.  Ces  senseurs  dtaient  plus  ou  molns  sophistiquds  :  depuis  les  gyroscopes  4 
poudres  pour  les  missiles  antichar  jusqu'aux  centrales  4  composants  lids  des  missiles  les  plus  modernes  en 
passant  par  des  centrales  4  deux  gyroscopes,  des  plateformes  fnertielles  pseudo- strapdown  4  la  fin  des 
anndes  60  et  des  plateformes  trois  axes  plus  rdeemment. 

Les  projets  de  missiles  tactiques  actuels,  dds  lors  que  leur  portde  ndeessite  un  guidage  inertiel 
m@me  peu  prdcis,  prdvoient  tous  l'emploi  de  centrales  4  composants  lids. . 

Pour  sa  part,  la  SFENA,  envisageant  une  telle  dvolution,  avait  dds  le  ddbut  des  anndes  1970 
recherchd  quel  serait  le  capteur  gyromdtrique  le  mieux  adaptd  4  une  utilisation  4  composant  lid  dans  un 
grand  domaine  de  mesure  et  dans  un  environnement  sdvdre.  Son  choix  s’est  portd  sur  le  gyrolaser  car  il 
apparaissait  clairement  que  ce  capteur  pouvait,  de  par  sa  conception,  avoir  de  trds  bonne  performance  en 
ddrive  sans  limitation  de  domaine  de  mesure  autre  que  celle  que  pourrait  apporter  l’dlectronique  utilisde 
pour  traiter  les  signaux  de  sortie. 

l'emploi  du  gyrolaser  a  pu  paraitre  trop  luxueux  pour  des  applications  aux  missiles  tactiques  et 
e'est  l'une  des  raisons  pour  laquelle  la  plupart  des  industriels  spdclalistes  du  gyrolaser  ont  jusqu'ici 
privilidgid  le  ddveloppement  de  gyrolasers  trds  performants  applicables  4  la  navigation  pour  avions. 

II  semble  aujourd'hui  que  les  performances  demanddes  aux  systbmes  inertiels  des  missiles  tactiques 
futurs  rentrent  tout-4-fait  dans  la  game  de  performances  rdalisables  avec  des  gyrolasers  de  petite 
tai lie. 

La  technologie  du  gyrolaser  a  par  ailleurs  dvolud  de  telle  sorte  que  des  petits  gyrolasers  sont 
aujourd'hui  rdalisables  industriellement  et  4  des  coOts  qui  les  rendent  parfaitement  compdtitifs  vis-4-vis 
des  gyromdtres  classiques. 

La  SFENA  est  dds  aujourd'hui  en  mesure  de  fournir  des  systhmes  inertiels  dquipds  de  gyrolasers  et 
dont  1 ' encombrement,  le  prix  et  la  facilitd  de  maintenance  sont  bien  adaptds  4  un  emploi  sur  des  mlssilps 
de  moyenne  portde  tels  des  missiles  anti-navires. 

De  tels  systdmes  ont  gdndralement  la  configuration  dp  la  figure  1. 

Trois  gyromdtres  et  trois  accdldromdtres  fournissent  des  signaux  qui  ne  peuvent  Atre  utilisds 
directement  pour  la  navigation  et  le  pilotage,  sott  parce  qu'il  faut  effecturr  des  corrections  de  hiais  et 
de  facteur  d'dchelle,  soit  parce  qu'ils  sont  trop  bruitds  pour  ftre  utilisds  directement  pour  le  pilot aqe 
ou  la  stabilisation  de  la  llgne  de  vtsde  de  1 ' auto-directeur. 

les  ralrols  ndre ssaires  4  la  navigation  ont  dtd  trhs  souvent  (Writs.  trai  qui  mneernent  le 
pilotage  sernni  spdrlflqiies  au  missile.  C'est  pnurqunl,  rrl  expusd  no  traltma  que  v.pei  ts  lids  au> 
capteurs  et  4  1'dl aliorat Ion  des  signaux  ndcessalrcs  4  ia  navigation  ct  au  pilotage. 
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FIGURE  1 

SYNOPTIQUE  «J  GUIDA6E  INERTIEL  D'UN  MISSILE 

INERTIAL  GUIDANCE  FOR  MISSILE  -  TIPICAL  ORGANIZATION 

la  suite  de  cet  expose  traltera  : 

-  des  specifications  des  capteurs  pour  les  utilisations  sur  missile  tactique  de  moyenne  portde, 

-  des  cholx  techno logiques  concernant  le  systfcme,  les  gyrolasers  et  les  acceidromfetres, 

-  des  problfemes  de  bruit  sur  les  signaux  destines  au  pilotage. 

2.  SPECIFICATIONS  OES  CAPTEURS 


Pulsque  les  missiles  moyenne  portae  sont  gdndralement  des  missiles  4  prdguidage  inertiel,  la 
precision  des  capteurs  va  ddpendre  des  performances  demanddes  au  prdguidage. 

Lorsque  Ton  parle  de  moyenne  portde,  11  s'aglt  gdneralement  de  portdes  comprises  entre  30  et 
300  km,  ce  qul  est  trbs  etendu. 

La  precision  demandde  au  prdguidage  sera  telle  que  l'erreur  de  navigation  soit  trbs  inferleure  aux 
incertitudes  sur  la  position  de  la  clble  au  moment  ou  1 ' auto-directeur  est  en  mesure  de  la  repdrer.  Ces 
Incertitudes  dependent  dvldemment  de  la  distance  de  la  clble  mals  aussi  de  sa  vltesse  et  de  la  vitesse  du 
missile. 

L'eventall  des  hypotheses  possibles  est  done  considerable  ;  cependant,  en  prenant  des  cas  de 
trajectolres  sur  les  plus  longues  distances,  on  peut  fixer  des  performances  ndeessaires  pour  1'lnertie  et 
en  ddduire  des  specifications  pour  les  capteurs. 

Pour  ce  qul  conceme  le  pilotage,  les  caractdrlstiques  4  specifier  prendront  en  compte  le  type  de 
trajectolre,  les  modes  de  pilotage  et  les  precisions  recherchees  4  1' impact. 

Le  tableau  de  la  figure  2  cl-dessous  donne  un  ordre  de  grandeur  des  principals  specifications  pour 
les  gyromitres  et  les  acceieromfetres  : 


GYROMETRE 

ACCELEROMETRE 

Stabilite  du  biais 

Marche  au  hasard 

Random  walk  IAKOA 

0,5  4  20“ /h 

0,1  4  1“/  h 

2.10-^g  4  ?.10'3g 

Stabilite  du 
facteur  d'echelle 

Scale  iacto/i 
stability 

5.10-5  4  10-3 

lO"4  4  10-3 

Linearite  du  F.E. 

Scalt  (ado* 

UnlxAity 

5.10-5  i  10-3 

10*4  j  10-3 

Oomaine  de  mesure 

Range 

400  4  »2000“/sec 

200  4  1000  m/sec2 

Resolution 

Sen-uitvtYg 

1  4  10  sec.  arc/pulse 

0,5  4  5  cm/sec 

FIGURE  2 

PR  INC  I  PALES  SPECIFICATIONS  OES  GYR0METR1S  ET  DIS  ACCf  I  I  POMETRIS 
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On  peut  remarquer  que  les  domaines  de  mesure  tendront  toujours  4  augmenter  aussi  bien  pour  les 
vitesses  angulaires  que  pour  les  accdldrations.  Si  I'on  veut  qu'un  systbme  pulsse  8tre  utilisd  aisdment 
sur  plusieurs  types  de  missiles,  11  faut  qu'il  soit  capable  des  plus  grands  domaines  de  mesure. 

Les  autres  specifications  vont  concerner  le  volume,  le  poids,  la  consommation,  le  domaine  de 
temperature  et  vont  ddpendre  etroitement  du  type  de  missile  et  de  sa  mission.  Le  meilleur  compromis  doit 
8tre  trouve  entre  la  miniaturisation,  la  fiabillte,  la  facilite  de  maintenance  et  les  coOts.  Enfin,  les 
capteurs  dolvent  Stre  prdvus  pour  une  durde  de  vie  en  stockage  supdrieure  4  15  ans  et  permettre  d'espacer 
le  plus  possible  les  contrfiles  pdriodiques  pour  minlmiser  les  coOts  d'entretien  des  missiles. 

3.  CHOIX  OES  CAPTEURS 

3.1.  Le  qyromfetre 

D8s  lors  que  I'on  recherche  des  stabilitds  de  biais  de  quelques  degrds  par  heure  dans  un  domaine  de 
mesure  pouvant  aller  au-del4  de  2000°/ sec., le  gyrombtre  laser  est  le  capteur  le  mieux  adapte.  En  effet, 
ces  deux  caractdristiques,  stabilite  du  biais  et  domaine  de  mesure  ne  dependent  pas  des  m&nes  paramdtres 
physiques.  L'un  depend  de  la  qualite  de  l'optique,  l'autre  de  la  bande  passante  de  1 'dlectronique.  Et  I'on 
peut  aisdment  amdliorer  l'un  sans  ddtdriorer  l'autre,  ce  qui  n'est  pas  le  cas  avec  les  gyromfetres 
mdcanlques  classiques. 

Avant  de  ddvelopper  un  gyromfetre  laser  pour  missile,  11  faut  faire  certains  choix  technologiques. 

3.1.1.  Choix  de  la  forme  et  de  la  taille 


Compte  tenu  des  performances  demanddes  et  des  contraintes  de  volume,  la  taille  sera  gdndralement 

petite  et  le  choix  est  possible  entre  une  forme  triangulaire  et  une  forme  carrde  pour  le  bloc  optique. 

La  figure  3  montre  que  pour  les  petites  tallies,  la  forme  carrde  ne  prdsente  pas  d'avantage  evident 
pour  1' encombrement  par  rapport  8  la  forme  triangulaire  (4  sensibillite  identique  bien  entendu  ;  dans  ce 
cas,  un  carrd  de  9,2  cm  est  equivalent  4  un  triangle  de  12  cm). 

En  outre,  on  volt  qu'il  n'y  a  plus  de  place  sur  le  c6td  pour  placer  la  cathode  et  qu'il  faudra  done 

la  placer  sur  le  dessus,  ce  qui  sera  un  inconvenient  pour  la  fixation  du  bloc  optique  sur  un  support  et 

pour  1' encombrement  du  bloc  Iu1-m8me. 

Au  plan  des  coOts  et  aprbs  industrialisation,  un  gyrolaser  triangulaire  sera  moins  ondreux 
puisqu'il  ne  compte  que  trois  miroirs  et  que  les  mfroirs  sont  un  point  important  du  prix  du  gyrolaser. 
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Pour  le  cholx  dAfinitif  du  pArimfetre  du  gyrolaser,  il  faut  tenlr  compte  de  1 'ensemble  des 
performances  demandAes.  La  technologie  des  miroirs  aujourd’hui  progresse  de  sorte  qu'il  est  possible  de 
rAaliser  des  gyrolasers  avec  des  pArimfetres  aussl  petits  que  6  cm. 

Le  tableau  de  la  figure  4  ci-dessous  montre  les  niveaux  de  performances  qui  peuvent  Stre  obtenus 
pour  diffArents  pArimfetres  de  gyrolaser  trlangulaire. 


PArimfetre  cm 

33 

21 

12 

6 

StabilitA  du  biais 
Daiit  'Ik 

0,003  4  0,03 

0,01  4  0.1 

0,1  4  1 

0,5  4  5 

Marche  au  hasard 
Random  imZk  '/\fh 

2.10-3  4  10-2 

6.10-3  4  3.10-2 

3.10-3  4  o,15 

0,2  4  1 

Facteur  d'Achelle 
Scale  ituctoa 
pulae/’/aec 

1800 

1145 

655 

327 

StabilitA  du  facteur 
d'Achelle 

Scale  iactoK 
■liability 

10-6  4  10-5 

2.10-6  4  2.10-5 

3.10-6  4  3.10-5 

10-5  4  io-4 

FI  SURE  4 

GAHME  DE  PERFORMANCES  DES  GYROLASERS  EN  FONCTION  DU  PERIMETRE 

Pour  chaque  performance,  les  valeurs  les  moins  bonnes  correspondent  4  ce  qui  peut  fetre  obtenu  sans 
precaution  particulifere  et  done  au  moindre  cout,  les  valeurs  les  meilleures  sont  une  indication  des 
ameliorations  qui  peuvent  @tre  apportees  sur  chaque  type  de  gyrolaser  soit  dans  sa  definition,  soit  par 
une  model isation  plus  poussAe  des  erreurs. 

On  voit  aisAment  qu'un  gyrolaser  de  12  cm  de  pArimfetre  permet  de  tenir  facilement  toutes  les 
performances.  Un  gyrolaser  de  6  cm  peut  Agalement  Stre  satisfaisant  mais  il  risque  de  couter  plus  cher  4 
performance  Agale  puisqu'il  faudra  lui  apporter  des  ameliorations. 

Deux  AlAments  seront  Agalement  determinants  pour  le  cholx.  Il  s’agit  de  la  stabilitA  des 
performances  pendant  le  stockage  et  du  niveau  de  bruit  pour  le  pilotage. 

Pour  le  premier  point,  des  performances  supArieures  4  celles  requises  vont  permettre  d'espacer, 
voire  de  supprimer  les  contrSles  pendant  la  vie  du  missile.  Dans  ce  cas,  le  gyrolaser  de  12  cm  est 
beaucoup  plus  intAressant  que  celui  de  6  cm. 

Pour  le  second  point,  le  bruit  de  quantifiaction  est  Avidemment  multipliA  par  deux  en  passant  de  1) 
4  6  cm.  Le  bruit  de  marche  au  hasard  est  lui  multipliA  par  un  facteur  beaucoup  plus  important  dans  des 
zones  de  frequence  oil  le  pilotage  sera  sensible  (figure  5).  Ce  point  particulier  peut  dans  certains  cas 
Stre  dimensionnant  et  Stre  une  limitation  pour  Vemplof  de  trfes  petits  gyrolasers. 
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Les  critdres  d' encombrement  imposes  pour  les  missiles  tactiques  de  moyenne  portde  pendant  la 
prochaine  ddcennie  sont  tels  qu'ils  n'imposent  pas  1'emploi  d'un  tres  petit  pdrimetre.  C'est  pourquoi  la 
SFENA  a  ddcidd  de  ddvelopper  des  gyrolasers  de  12  cm  pour  rdaliser  des  systdmes  inertiels  pour  ce  type  de 
missiles. 

3.1.2.  Dispositif  d'dl imination  de  la  zone  aveuqle 

Les  gyrolasers  prdsentant  une  zone  aveugle  due  au  couplage  des  ondes  lumineuses  sous  1'effet  des 
rdtrodiffusions  des  miroirs,  il  faut  les  munir  d'un  dispositif  capable  d'dliminer  cette  zone  aveugle. 

Le  dispositif  d'dl imination  de  la  zone  aveugle  retenu  malgrd  ses  inconvdnients  est  1' activation 
mecanique  qui  consiste  3  faire  osciller  le  bloc  optique  sur  son  axe  de  mesure  3  une  frequence  de  quelques 
centaines  de  hertz  et  a vec  une  vitesse  crdte  comprise  entre  100  et  20 OVsec. 


C'est  encore  aujourd'hui  le  seul  dispositif  qui  ne  ddtdriore  pas  les  performances  des  gyrolasers. 
II  utilise  l'inertie  du  bloc  optique  montd  sur  un  systeme  elastique  en  rotation.  L'ensemble  oscille  a  sa 
frequence  propre  sous  I'action  d'un  moteur  conmandd  par  des  circuits  dlectroniques  adaptds. 


Pour  des  raisons  pratiques,  il  s'est  avdrd  trds  difficile  de  l'incorporer  au  bloc  optique  et  il  es! 
placd  sous  celui-ci.  Pour  dvlter  tout  mouvement  conique  important,  les  trois  frequences  d' activation  sont 
volontairement  ddcaldes  les  unes  par  rapport  aux  autres.  L'ensemble  est  dimensioned  pour  tenir  les 
conditions  d'environnement  mdcanique  les  plus  sdvdres  (figure  6). 


FIGURE  6 

SOUS-ENSEMBLE  GYROLASER 

I,A::KK  GY  HO  iVB-AGGKMBLY 

3.1.3.  Dispositif  de  lecture 


Il  existe  une  solution  optique  pour  dliminer  le  bruit  sur  la  vitesse  angulaire  mesurd  par  le 
gyrolaser  du  au  mouvement  alternatif  d'activation.  Cette  solution  consiste  3  fixer  deux  dldments  du 
systdme  de  lecture  sur  le  bottier  et  non  sur  le  bloc  optique  et  3  utiliser  le  mouvement  relatif  du  bloc  et 
du  dottier  pour  crder  un  ddfilement  de  frange  dgal  et  opposd  3  celui  du  3  1'effet  nyromdtrique  lui-meme. 

Le  emplacement  des  fringes  dO  3  1'activaticn  est  ainsi  annuld  et  il  ne  subsiste  plus  que  le  ddfilement 
utile. 


Ce  systbme  est  assez  ddlicat  3  rdaliser.  Le  filtrage  dlectronique  des  signaux  d’activation  a  paru  1 
terme  moins  coilteux  et  a  dtd  retenu.  C'est  pourquoi,  le  dispositif  de  lecture  est  classique  et  fixe 
directement  sur  le  bloc  optique. 

Les  mitres  circuits  dlectroniques  assoclds  au  gyrolaser  et  qui  r.nmprennent  1'  asservissement  de 
longueur  de  cavitd,  la  rdgulation  du  courant  et  le  dispositif  d'allumaqe  sont  classiques. 

L'ensemble  des  circuits  dlectronique  est  rassembld  dans  trnis  circuits  hydrides  couches  dpaisses. 

I  Is  seront  ultdrieurement  rdalisds  en  circuit  prddiffusd,  re  qui  permettra  de  rdduire  les  cofits. 
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Pour  rdduire  I' encombrement ,  tes  trois  gyrolasers  sont  ddpourvus  de  bottlers.  Ils  sont  logds  dans 
les  alveoles  d'une  piece  en  fonderle  qul  constltue  l'unitd  de  mesure  Inertlelle  (UMI)  du  systbme  et  assure 
une  trds  grande  rigidity  et  une  bonne  stability  entre  les  axes  de  mesures  (figure  7). 

Le  volume  de  l’unitd  de  mesure  inertlelle  seule  ne  ddpasse  pas  1,5  1  et  le  bottler  complet  avec  le 
calculateur  et  les  alimentations  a  un  volume  de  3,3  1. 


LV.  POWW  SUPPLY  RING  LASER 


MOUNTING  PLATE  SO  CONNECTOR 


FIGURE  7 

SYSTEHE  INERTIEL  POUR  MISSILE  -  ARCHITECTURE 
INERTIAL  UNIT  FOR  MISSILE  -  ORGANIZATION 

3.2.  L'accdldromfetre 

Les  conditions  de  choix  pour  1 ' accdldrometre  sont  : 

-  Un  domaine  de  mesure  important  ; 

-  Une  bonne  stability  du  biais  ; 

-  Une  grande  resistance  aux  conditions  d'environnement  mdcanique  et  notament  aux  chocs  violents  contre 
lesquels  ils  ne  seront  pas  protdgds  par  une  suspension. 

La  SFENA  dispose  d'une  grande  game  d' accdldromdtres  pendulaires  asservis. 

Parmi  ceux-ci,  le  modfele  0  125  (figure  8)  dispose  d'une  suspension  5  pivots  trds  robuste.  II  est 
rdalisd  dans  une  technologie  faible  coOt  qul  rdpond  trds  bien  S  ce  besoin  et  son  domaine  de  mesure  peut 
8tre  ajuste  en  fonction  du  besoin. 

Ses  principales  caractdristiques  sont  representees  sur  la  figure  9  ci  dessous  : 


Son  asservissement  est  realise  en  binaire  force,  ce  qui  permet  d’obtenir  directement  des  increments 


de  vitesse  et  dvite  une  conversion  tension  frequence  toujours  ondreuse. 


Domaine  de  mesure 

Range 

m/s2 

65 

250 

500 

Facteur  d'dchelle 

Scale  jaetoa 

Hz/m/s2 

103 

256 

128 

Stabilitd  du  facteur  d'dchelle 
Scale  iacto*  NtabiXcti) 

10-4 

10-4 

2.10-4 

Variation  du  f.E.  en  temper. 

S.F.  Voa catcon  uuth  temp. 

/•c 

1.4  10*4 

1.4  10-4 

1.4  10*4 

Stabilitd  du  biais 

8 itu  UabUitR 

m/s2 

10-3 

10-3 

2.10-3 

Variation  du  biais  en  temper. 
Blo4  variation  usith  tempest. 

m/s2 

8.10-4 

3.10-3 

6.10-3 

FIGURE  9  :  ACCELEROHETRE  J125  -  PRINCIPALES  CARACTFRfST IQULS 


HGURE  10 

TRirrwr  accci  erohetriqiif 

,1.  ■-  )■ A  INTER  Glhl-Ar.UMh;  V 
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Les  trois  accAlArombtres  sont  places  sur  un  tribdre  support  fixA  lui-mbme  sur  TUMI  (figure  10). 

4.  TRAITEHENT  DES  SIGNAUX  DE  PILOTAGE 

Les  critbres  de  choix  pour  le  traitement  des  signaux  de  sortie  pour  le  pilotage  sont  les  suivants  : 

-  Retard  de  datation  faible  ; 

-  Frequence  de  sortie  pour  le  pilotage  assez  AlevAe  (300  A  500  Hz) 

-  Spectre  de  bruit  aussi  r Adult  que  possible. 

II  est  Svident  que  les  deux  premiers  critbres  sont  liAs.  Mais  le  retard  de  datation  va  aussi 
dApendre  de  la  frequence  d'activation  des  gyrolasers  et  du  procAdA  utilisA  pour  filtrer  le  mouvement 
d' activation. 

4.1.  filtraqe  des  mouvements  d'activation  des  gyrolasers 
Trois  procAdAs  sont  possibles  : 

Le  premier  (figure  11),  Aquivalant  au  filtrage  optique,  consiste  1  mesurer  la  vitesse  du  bloc 
optlque  par  rapport  au  bottler,  ou  dans  notre  cas  au  tribdre  de  1’unitA  de  Mesure  Inertielle.  Cette 
mesure,  convertle  en  frbquence,  est  ensuite  soustraite  de  la  mesure  issue  du  gyrombtre  A  l'aide  d'un 
compteur  dAcompteur. 

Ainsi,  le  mouvement  dO  1  T activation  est  compensA  et  si  les  rAglages  sont  bien  faits,  11  ne 
subsiste  plus  de  bruit  d'activation  1  la  sortie  du  compteur  dAcompteur  (figure  13). 

Le  second  et  le  troisibme  procAdA  (figure  12)  effectuent  le  filtrage  par  calcul,  par  addition  des 
impulsions  acqulses  pendant  une  pAriode  d'Achantlllonnage  et  de  celles  acquises  pendant  la  pAriode 
prAcAdente.  On  voit  aisAment  que  si  l'acqulsltlon  est  falte  en  synchronisme  avec  Tactivation  mAcanlque  du 
gyrolaser,  c'est-A-dlre  si  Fc  »  Fd  ou  si  Fc  -  2Fd,  ce  qul  est  plus  favorable,  les  impulsions  de  sorties  du 
gyrombtre  dues  au  mouvement  d'activation  vont  s'Allminer. 

Dans  le  cas  du  second  procAdA,  le  calcul  est  fait  par  logiciel  dans  le  calculateur. 

Malheureusement,  du  fait  que  pour  Avlter  des  mouvements  coniques,  les  frAquences  d'activation  des 
trois  gyrolasers  sont  lAgbrement  diffArentes,  le  prAlbvement  synchrone  par  le  calculateur  est  quasiment 
impossible  sans  risquer  de  perdre  des  informations  ou  sans  rajouter  des  bruits  supplAmentaires.  Le 
prAlbvement  sera  done  asynchrone,  A  une  frdquence  volsine  du  double  de  la  frAquence  d'activation.  La 
compensaton  d'un  prAlbvement  par  le  prAlAvement  prAcAdent  est  Imparfaite  et  entralnera  un  bruit  rAsiduel 
dont  la  frdquence  principale  sera  2Fc<aFd  dont  1‘amplitude  crbte  sera<vd  x  2n  (2Fc  -  Fd). 

FB 

Bien  qu'Atant  hors  du  domaine  des  frAquences  utilisAes  en  pilotage,  ce  bruit  peut  btre  trbs  gbnant 
dans  les  boucles  d' asservissement  des  gouvernes. 

Contralrement  au  second  procAdA  ou  le  filtrage  Atait  fait  par  le  logiciel,  le  troisibme  procAdA 
revient  A  I'acqulsition  synchrone  en  effectuant  le  retard  et  l’addition  par  des  circuits  discrets 
IndApendants  sur  chaque  vole.  Le  bruit  en  sortie  est  alors  Aquivalent  A  celul  du  premier  procAdA. 

Dans  le  cas  des  procAdAs  2  et  3  qul  font  intervenir  une  addition  entre  deux  acquisitions  angulaires 
successives  de  durAe  Tc  (pAriode  d'Achantlllonnage),  le  retard  de  datation  est  Agal  A  une  pAriode 
d'Achantlllonnage  Tc  volsin  de  la  demi-pAriode  d'activation  Td/2. 

Dans  le  cas  du  procAdA  1,  la  soustractlon  Atait  falte  en  permanence  et  sans  retard  ;  le  retard  de 
datation  n'est  plus  que  la  demi-pAriode  d'Achantlllonnage  Tc/2. 


FIGURE  11 

FILTRAGE  DE  L‘ ACT  I  VAT  I  ON 

fi mm  mwaw.w  nt  •  ratw: 
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COMPTEUR 

DECOHPTEUR 

UP-DOWN 

COUNTER 


SOLUTION  2  :  FILTRACE  LOGICIEL  Fc  *  2Fd 
SOFTWARE  FILTERING  Fo  *  2Fd 

SOLUTION  3  i  FILTRACE  PAR  MATERIEL  Fc  •  2Fd 
HARDWARE  FILTERING  Fa  =  2Fd 


ACQUISITION 
A  Fc 
Fa  DATA 
ACQUISITION 


FIGURE  12 

F1LTRAGE  DE  L' ACTIVATION 

DITHER  MOUVEMENT  FILTERING 


VITESSE  ELOC  OPTIQUE 
OPTICAL  BLOCK  RATE 


SORTIE  CYROMETRE 

GYRO  OUTPUT 


SORTIE  MESURE 
VITESSE  DU  BLOC 

OPTICAL  BLOCK  RATE 
MEASUREMENT 


lc-1  t\  tVl  t+2\  t+»|t-l  t\  /+!  t+X 


I  I 


ACQUISITION 

ACQUISITION 


ACQUISITION  RETARDEE 
DELAYED  ACQUISITION 


BRUIT  RESIDUEL 
NOISE  AFTER  FILTERING 


RETARD  DE  DAT  AT  ION 
DELAYED  DAT  AT  I  ON 


ASYNCHRONE 


|Nt-l  Nt  Nt+1  Nt+2  Nt+3  r*t-l  Kt  Nt+I  Nt+2 


|Nt-2  Nt-1  Nt  Nc+1  Nc+2f,t-2  Nt-1  NC  Nt+! 


Nt-2  I  Nt+1 

Nt-1  +Nt  I 

vr  '  y .  Nt+z 

+  Nt  +  MfH  _ 


Tc  -  M 
2 


FIGURE  13 

FIITRAGE  DE  L1 ACTIVATION  A  n  =  0 

DITHER  FILTERING  WHEN  t!  -  0 

SI  Ton  veut  rddulre  les  bruits  pour  le  pilotage,  le  cbolx  rcste  cntre  les  proems  1  et  3. 

A  l'avantage  du  proeddd  1  son  falble  retard  de  datatlon  qui  no  ddpend  que  de  la  frequence  do 

calcul. 

A  l'avantage  du  proeddd  3,  l'absence  de  cowplexltd  an  niveau  du  capteur  et  des  circuits 
d' acquisition  et  de  conversion  tension  frequence. 

Les  circuits  de  retard  et  de  conparalson  suppldmentalm  peuvrnt  Mm  rdallsds  en  technologic 
prddlffusdo  et  seront  done  peu  ondreux. 

Cette  solution  3  sera  retenue  cheque  fols  qu'un  retard  de  datatlon  dgal  J  la  demi-pdrlorte 
d'actlvatlon  sera  acceptable. 
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Li  chatne  gyrometrique  fournissint  les  signaux  de  pilotage  compte  plusleurs  sources  de  bruit.  Ell. 
est  scMaitisle  sur  la  figure  14. 

Li  prealbre  source  de  bruit  est,  bien  entendu,  la  marche  au  hasard  du  gyrolaser  dont  la  density 
spectrale  qbb  s'exprime  en  *2/h. 


La  seconde  source  de  bruit  correspond  au  bruit  aldatoire  impose  b  1' amplitude  d'activation.  El le 
correspond  b  une  incertitude  sur  la  position  du  gyrolaser  et  est  caractdrisde  par  un  dcart  type 
correspondant  environ  b  0,3  q  oO  q  est  le  poids  de  1‘ increment  du  gyrolaser. 


QUANTIFICATION  QUANTIFICATION  BRUIT  DE 

QUANTIZATION  A  Fc  TRONCATURE 


o  ■  0, 3q 


QUANTIZATION 
AT  Fj 

a  -  0,Aq 


TRUNCATION 

NOISE 

a  -  0,29q 


FIGURE  14 

PRINCIPALES  SOURCES  DE  BRUIT 

MAIN  NOISE  SOURCES 


Degz/Hx 


FREQUENCE 

FREQUENCY 


FIGURE  15 

DENSITE  SPECTRALE  DE  BRUIT 

SPECTRUM  DENSITY  NOISE 

Du  fait  de  son  type  de  realisation,  la  rejection  d'activation  n’apporte  pas  de  bruit 
suppiementaire.  Par  contre  1' acquisition  des  increments  sur  le  compteur-ddcompteur  b  une  frequence  Fc 
Introduit  un  bruit  d'echantlllonnage  dont  Vecart  type  est  egal  b  0,4  q. 

Le  traitement  des  echantillons  peut  egalement  introduire  un  bruit  de  tronrature  dont  l'drart  type 
sera  a  ■  0,?9  q. 
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Les  caiculs  permettant  d'etabllr  la  density  spectrale  du  bruit  resultant  de  ces  cinq  sources  de 
bruit  sont  trop  longs  pour  Itre  reproduits  dans  cat  expose. 

Its  montrent  qua  la  densitd  spectrale  da  bruit  crott  en  fonction  de  la  frequence  jusqu'4  un  maximum 
voisin  da  la  noitie  de  la  frequence  d'echanti llonnage  Fc. 

11$  confirment  dgalement  que  V  influence  da  la  marche  au  hasard  est  preponddrante  aux  basses 
frequences  comae  le  laissait  supposer  la  figure  S. 

Des  essais  expdrimentaux  ont  et t  faits  pour  verifier  I'analyse  thdorique.  Les  deux  courbes  de  la 
figure  15  permettent  de  comparer  les  courbes  thdoriques  et  pratiques. 

L'dcart  sur  les  basses  frequences  provient  de  ce  que  le  gyrolaser  utilise  avait  une  marche  au 
hasard  beaucoup  plus  faible  que  celle  prise  pour  faire  le  calcul  thdorique. 

L'ensenble  des  mesures  de  bruit  realise  sur  les  systbmes  inertiels  pour  missiles  ont  montre  que  les 
bruits  crees  aussi  bien  par  le  gyrolaser  de  12  cm  retenu  pour  ces  equipements  que  par  les  traitements 
utilises  etaient  compatibles  d'un  emploi  sur  les  missiles  les  plus  performants. 

5.  PERSPECTIVES 

Si  des  blocs  Inertiels  utilisant  des  gyrolasers  de  12  cm  sont  disponibles  pour  equiper  les  missiles 
tactiques  moyennes  portdes  dans  les  dix  prochaines  anodes,  on  peut  examiner  d&s  ma Intenant  dans  quelle 
direction  vont  devoir  dvoluer  ces  materiels. 

II  est  bien  evident  que  la  demande  des  constructeurs  de  missiles  ira  toujours  vers  une  diminution 
des  encombrements  et  une  augmentation  des  domaines  de  mesure  pour  rdaliser  des  missiles  plus  petits  et 
plus  maniables. 

Les  specifications  de  derive  varieront  vraisemblablement  peu  et  l’effort  sera  done  4  porter  pour 
les  gyrolasers  sur  la  taille  sans  pour  autant  perdre  sur  le  niveau  de  bruit. 
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Dins  l'avenir,  pour  rddulre  cette  tallle,  des  ameliorations  sont  possibles  : 

-  d'une  part,  Vincrdment  d'angle  en  sortie  du  gyrolaser  peut  Stre  rddult  en  utlllsant  des  circuits 
dlectronlques  adaptds  pour  tralter  les  fringes  d1 Interference.  Dans  ce  cas,  mime  avec  des  gyrolasers  de  6 
cm  de  pdrlmltre,  le  bruit  de  quantification  peut  ttre  ameilore. 

-  d' autre  part,  les  progrfes  Incessants  falts  dans  la  technologle  des  mirolrs  de  gyrolaser  permettront 
encore  de  dlmlnuer  la  zone  aveugle  et  done  la  marche  au  hasard.  La  tallle  des  gyrolasers  pourra  done  etre 
diminude  en  mime  temps  que  la  tallle  des  dlectronlques  associde  diminuera  avec  les  progrfes  de 
1‘dlectronique. 

Une  autre  vole  devolution  se  sltue  pour  les  gyrolasers  dans  la  realisation  de  capteurs  trlaxiau* 
pour  lesquels  des  travaux  de  ddveloppement  sont  en  cours. 

De  tels  capteurs  plus  complexes  certes  que  les  capteurs  monoaxe  permettront  de  rddulre 
T encombrement  global  tout  en  conservant  un  pdrlmfctre  supdrleur  :  14  S  16  cm  par  exemple  pour  des  parcours 
carrd  Imbrlquds  (figure  16). 

Ces  capteurs  ouvrent  trols  perspectives  : 

-  Une  reduction  d' encombrement 

-  Une  reduction  des  bruits  pour  le  pilotage 

-  Enfln,  une  reduction  des  coOts  pulsqu'un  capteur  triaxe  i  3  parcours  carrd  n'utlllse  que  6  mirolrs  et  un 
seul  mdcanlsme  d' activation. 

Dans  l'une  ou  1' autre  de  ces  voles,  11  sera  possible  de  ddvelopper  dans  les  anndes  qui  viennent  des 
ensembles  Inertlels  I  gyrolaser  dont  le  volume  n'excddera  pas  1,5  1,  qui  seront  utlllsables  pour  une  trds 
grande  game  de  missiles  et  dont  le  prlx  sera  rendu  trds  compdtltlf  par  1'effort  d1 Industrialisation  fait 
sur  les  gyrolasers  et  sur  la  mlcrodleetronlque. 
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UTILISATION  DTJN  MAGNETOMETRE  AUTOCOMPENSE  DANS  UN  SVSTEME  DE  NAVIGATION 
ECONOMIQUE  POUR  HELICOPTERE 

by 

J.L.Roch,  i.C.Goudon  and  Ph.  Chaix 
Societe  Crou/et 
rue  Jules  Vedrincs  25 
BP  1014 

F-26027  Valence,  France 


1.  INTRODUCTION 

L' analyse  des  missions  d'un  heiicoptfere  arme  a  montre  le  besoin  d' installer  sur  celui-ci  un  systfcme 
I  de  navigation.  En  effet,  pour  assurer  sa  9^curitd  et  done  ne  pa9  £tre  detecte  par  les  systfemes  ennemis 
l’heiicoptfcre  arme  doit  voler  en  suivi  de  terrain  &  une  hauteur  inf^rieure  ou  egale  k  50  in  et  b  une 
vitesse  variant  dans  tout  le  domaine  d'utilisation.  II  est  done  difficile  de  se  repgrer  pendant  ces 
phases  de  vol  dites  "tactiques"  d’ou  la  necessity  d'avoir  un  systfcme  de  navigation  sur  1 'heiicopt^re 
(precision  du  systfcme  souhaite). 

1.1.  Presentation  et  analyse  de  diffSrents  systfemes  de  navigation  autonoroe 

II  existe  plusieurs  sortes  de  systfemes  de  navigation  autonome  (sans  aide  extdrieure)  : 

-  Centrale  inertielle 

-  Systfeme  de  navigation  hybride  (inertie  +  reference  de  vitesse  sol) 

-  Systfeme  compost  :  .d'un  capteur  de  cap  magnet ique 

.  d'une  centrale  de  verticale 
.  d'un  capteur  de  vitesse  sol 
.  d'un  calculateur 

Ce  systfcme  de  navigation  permet  d'utiliser  deux  types  de  cap  d'origine  magnetique  : 

1.1.1.  Cap  qyromagnetigue 

Cet  appareil  est  compose  de  deux  sous -ensembles  :  une  "flux-valve"  et  un  compas  gyromagnet ique. 

Le  compas  gyromagnet ique  (gyroscope)  est  asservi  &  long  terme  sur  la  inference  magnet ique  de  la 
"flux-valve"  afin  de  compenser  les  diff^rentes  derives  du  gyroscope  (derive  propre,  rotation  term, 
convergence  des  meridiens). 

La  "flux-valve"  est  un  appareil  penduie  qui  permet  de  mesurer  le  champ  magnetique  horizontal  mint  if 
6  la  verticale  apparente)  et  qui  doit  done  £tre  compensd  magnet iquement  6  cause  des  perturbat ions 
magnet lques  dues  £  1 'htflicoptfere. 

Cette  compensation  est  delicate  car  son  automat isat ion  est  prat iquement  exrlue  (necessite  d'rffc'ctuer 
la  compensation  en  vol  en  statique)  et  elle  n^cp9site  un  out ll Inge  couteux  (chercheur  de  Nord, 
theodolite, . . . ) . 

De  plus,  lorsque  le  val  est  agite  (vol  tactique)  de  nombreuser.  erreurs  de  cap  apparaissent  qui 
sont  dues  : 

-  6  la  vanne  de  flux  (erreurs  dues  &  la  pendularite) 

-  &  la  surveillance  magnet  ique  (saturation  de  1 '  asservi  ssemrnl  ,  coupon's  de  surveillance  frequent es 

dues  aux  attitudes  et  aux  accelerations) 

-  au  gyrnsrnpe  directionnel  ( fonct ionnement  frequent  en  di rer t innnel ,  erreurs  de  cardan  tmp'Tt  nnti-i, 
snuf  prmr  les  rent  roles  bi -gyrosenpiques) . 

1.1.2.  Cop  d'origine  magnet ometr ique 

le  maqn6t  nmM  re  Pst  un  capteur  qui  permet  de  mesurer  les  Inns  e-omposant  es  flu  rhamp  magnet  i gin* 
amt)  i  ant  nuivnnt  un  repfcre  orthonorme. 

les  romftnsnntes  mimi  memireea  hoiu  enauila  rumprnoees  *!»•*»  «1 1 1  I  ej  enl  es  perl m hot  ions  magnet  igm 
pm  a  pro,|H  den  en  rrp^re  long-t  ravers  (rep^re  hor  jznnt  ft  1 )  d'on  no  en  di'dcnl  le  rap  rowjr w'*t  .  qnr. 
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Le  magndtomfetre  pr6sente  les  avantages  suivants  : 

-  il  ne  ndcesaite  pas  l'emploi  d'un  gyroscope  directionnel  car  le  maqnttomktre  n'est  pas  pendul6, 
done  pas  aoumis  aux  m£mea  erreurs  que  la  *' flux-valve”  pendant  les  phases  acc£l$r£es. 

-  il  est  d'une  utilisation  simple  et  pratique  grAce  notamment  au  principe  de  la  compensation 
automatique  en  val  qui  supprime  les  contraintes  li6es  h  une  calibration  delicate  sur  la  machine 

et  qui  permet  une  surveillance  du  bon  fonctionnement  du  capteur  et  de  la  stability  dea  perturbations 
magnet iques. 

-  le  coOt  du  syst&me  est  plus  modeste  car  on  n* utilise  pas  de  compas  gyromagn6tique  (gyroscope). 

1.2.  Choix  du  capteur  magnet ique 

C'est  le  magnet omfet re  statique  trois  axes  que  nous  avons  retenu  comme  moyen  de  mesure  de  la  r£f£rence 
magn^tique  car  il  permet  : 

-  une  compensation  plus  facile  et  automatique 

-  un  coGt  plus  faible 

-  une  fiabilit6  plus  importante  car  il  ne  comporte  pas  d'£16ment  mobile. 


2.  PRESENTATION  DU  SY5TEHE  DC  NAVIGATION 
Le  systfcme  est  composd  de  s 
-  un  calculateur  NADIR  (CROUZET)  qui  assure  : 

.  1’ acquisition  des  capteurs 

.  les  diffgrents  traitements  numAriques  (compensation,  calcul  du  cap,  entretien  de  la  navigation, 
.  la  visualisation  et  l'entrte  des  donn^es  (PCV) 


-  un  cin^moenfetre  Doppler  type  RON  80  B  (ESD)  qui  mesure  dans  un  repfcre  \i6  h  1' avion  les  composantes 
de  la  vitesse  sol 

-  un  gyroscope  de  verticale  GV  76-1  (ST1H)  qui  fournit  les  informations  d'attitude  (roulis  et 
83siette  longitudinale) 

-  un  magn^tomfctre  statique  3  axes  (CROUZET) 

Ce  capteur  est  constitu6  de  trois  sondes  dont  les  axes  d^finissent  un  trifcdre  trirectahgle  de  mesure, 
harmonist  avec  les  axes  avion.  Chaque  sonde  est  constitute  d'un  noyau  en  mat^riau  magn^tique  entour# 
d'un  bobinage  co-axial  parcouru  par  un  courant  alternatif  haute  frequence.  Ce  bobinage  presents, 
lorsque  le  noyau  est  soumis  6  un  champ  magnltique  ext£rieur,  des  dissym£t ries  de  tension  &  ses  borne;, 
ces  dissym6tries  sont  d£tect6es  et  annul^es  par  un  courant  continu  qui  est  done  proportionnel  a  la 
composante  du  champ  mesur£  par  la  sonde.  Le  magn^tomfctre  fournit  done  trois  tensions  continues 
proport ionnelles  aux  projections  du  champ  magn^tique  local  dans  un  repfere  lit*  au  porteur. 

-  Indicateur  de  navigation  type  132  (CROUZET) 

Cet  instrument  de  bord  permet  la  visualisation  des  informations  suivantes  : 

.  cap  magnet i que  sur  une  rose 
.  route  magnet ique  sur  un  index 
.  gi9ement  d'une  radio-bali3e 

.  distance  au  but  de  destination  sur  un  compteur 

.  direction  du  but  de  destination  sur  une  aiguille 

.  alnrmes  sur  trois  drspeaux  (cap,  gisement,  distance) , 

L 'entretien  de  la  position  pr^sente  est  assure  par  integral  ion  Hr?;  rnmpnsant os  Vitesse  Nord  et 
Vitesae  Est  qui  eont  obtenuea  par  projection  des  vitesses  doppler  h  l*uide  des  informations  d’aUitude 
(roulis  et  nnsiette  longi tudinale  fournia  par  le  gyroscope  rJe  vert  irate)  et  de  1 1  informat  ion  de 
cap  qtagraphique  (obtenu  par  cap  magnet i que  ♦  d6cl  maison) . 


3.  ELABORATION  DU  CAP  MAGNET  I QUE 


3.1.  Calcul  du  cap  maqndtique 

A  partir  des  trois  composantes  du  champ  magndtique  terrestre  (Htx,  Hty,  Htz)  et  des  informations  (Q9 
on  peut  calculer  les  composantes  long  et  travers  du  champ  d'ou  on  en  ddduit  le  cap  magndtique  (voir 
figure  2  pour  la  definition  des  angles  et  la  figure  3  pour  le  principe  de  calcul) 

=  Htx  cos&  +  Hty  sin0  sin^  +  Htz  sin0  cos  ^ 

Hj  s  Hty  cos  f  -  Htz  sin 

d'ou  Cm  =  Arctg  (-  )  +  kir 

HL 

L'ambiguitd  de  180°  sur  le  csp  due  b  la  fonction  arctangente  est  facilement  levde  par  l'examen  du 
signe  de  H^. 

3.2.  Protolfeme  particulier  de  la  compensation 

Le  champ  magndtique  mesurd  par  le  magndtom&tre  3A  n'est  pas  exactement  le  champ  magndtique  terrestre 
car  celui-ci  est  perturbd  par  l'environnement . 

3.2.1.  Rappels  aur  les  perturbations 

.  perturbations  de  fers  durs  :  elles  traduisent  les  effets  des  aimantations  rdmanentes  dans  les 
matdriaux  ferromagndt iques  et  les  champs  crdd9  par  les  courants  continue.  Cea  perturbations 
peuvent  se  modd laser  par  un  champ  additionnel  lid  eux  axes  du  porteur  :  F 

.  perturbations  de  fers  doux  :  elles  traduisent  les  deformations  des  lignes  de  champ  magndtique 
dues  &  1' inhomogdnditd  de  permdabilitd  magndtique  du  porteur.  Elles  se  moddlisent  par  un  champ 
perturbateur  qui  est  le  produit  d'un  tenseur  [K]  par  le  champ  magndtique  terrestre. 

En  conclusion,  les  mesures  du  champ  magndtique  sur  le  porteur  peuvent  se  moddliser  sous  la  forme 
suivante  : 


tenseur  de  perturbation  vrcteur  de  pertifrbation 

de  fers  doux  de  fe?s  durs 


3.2.2.  Principe  de  la  compensation 

S * i 1  n'y  avait  pas  de  perturbations  magndt iques,  on  s'apercevrait  que  si  1 'hdlicoptdre  pouvait  prendre 
toutes  les  orientations  possibles,  I'extrdmitd  du  champ  magndtique  se  ddplacerait  sur  une  sphere 
dans  les  axes  avion  (6  condition  de  rest er  dans  un  mdme  lieu  car  le  module  du  champ  varie  avec  la 
position) . 

Du  fait  des  perturbations  magndtiques  (fers  durs  et  fers  doux),  I'extrdmitd  du  champ  magndtique  mesurd 
ddcrit  un  ellipaoide. 

Le  but  de  la  compensation  est  done  de  calculer  les  caractdrist iques  de  cot  ellipsoide  .  son  centre 

.  so  forme. 


Or,  on  ne  peut  pas  ddcrire  l'ellipsoide  complfetement  (pas  de  vol  3ur  le  dor,)  par  consequent  on  a  (hoist 
un  certain  nombre  de  fiqure9  caractdrist iques  qui  apportent  suff isamment  d’ informations  pour  pnuvmr 
calculer  son  equation. 

Les  figures  chois ies  sont  plusieurs  vi rages  (de  360°  en  cap)  &  roulis  constant 
(f:  ,  V  =  -  «°  ,  f  =  ♦  J0«  ,  f  =  -  J0°). 

Afin  de  mieux  voir  la  partie  de  l'ellipsoide  qui  est  parcourue,  on  n  represent d  sur  la  figure  U  In 
perspective  isomdtrique  de  la  figure  ddcrite  par  I'extrdmitd  du  veefeur  champ  lorsque  1 *hdl icopt dre 
fait  des  360°  A  f =  +  Ub°  ,  f =  ♦  30°  ,  f s  ♦  10®. 

Line  fois  l'ellipsoide  ddtermind,  on  ddtermine  alors  les  pnramdtres  de  fers  durs  et  fers  doux 
(  F  ®t  [Kl)  A  partir  de  son  dquation  qui  permettent  de  transformer  1 'el  1  ipsni’de  en  sphdre. 

L’opdration  de  compensation  consiste  done  6  associer  chnque  point  de  l'ellipsoide  6  un  point  de  In 
sphdre. 
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Le  ddroulement  d'une  autocompensation  eat  alors  le  suivant  : 

-  Le  pilote  engage  le  mode  sutoconpeneation. 

-  II  effectue  ensuite  la  sdrie  de  figures  prdconisdes  jusqu'4  ce  que  le  calculateur  NADIR  lui  indique 
de  s'arrSter  (convergence  de  l'algorithme  aprAs  445  minutes  de  vol). 

T* 

-  A  l'iaeue  de  cette  autocompenaation,  lea  paramdtres  b  et  [K]  aont  figds  et  stockds  en  mtm oire 
permenente  afin  d'etre  utilises  pour  tous  les  vols  suivBnts. 

De  plus,  afin  d'assurer  une  surveillance  du  capteur  ou  de  determiner  si  l'etat  magndtique  de  l'hdlicop- 
tAre  a  change  (chengement  de  piAces,  embarquement  de  charges  magnetiques)  on  continue  pendant  les 
vols  suivants  4  reactueliser  l'dquation  de  l'ellipaoide  et  lorsqu'on  constate  qu'il  y  a  une  trop 
grande  difference  entre  l'ellipsoide  actuel  et  l'ellipsoide  fige,  on  declare  qu'il  y  a  un  problAme. 
(Le  pilote  deciders  slors  s'il  doit  rdeffectuer  ou  non  une  nouvelle  sutocompensation). 

3.3.  Calcul  du  cap  magnet ometrique 

Un  diagramne  fonctionnel  de  la  chaine  de  cap  eat  dome  figure  5. 

On  effectue  un  regroupement  des  deux  functions  prdsentdes  prdcddefflment  (calcul  du  cap  et  compensation). 


4.  EXPERIMENTATION  00  SVSTEHE  DC  NAVIGATION  AUTOAOg  AVEC  MAGNETOMETRE 

4.1 .  Introduction 

Le  aystAme  de  navigation  automate  a  ete  instalie  sur  deux  types  d’hdlicoptAre  frangais  : 

-  1'hdlicoptAre  PUMA  SA  350 

-  1'hdlicoptAre  GAZELLE  SA  342. 

et  esssyd  par  le  Centre  d'Essai  en  Vol  frangais  et  par  1'Armee  de  Terre  frangaise. 

4.2.  Esaai  du  ayateme  de  navigation  aur  PUMA 

4.2.1.  Presentation  de  1 ' installation 

L'hdlicoptAre  PUMA  eat  un  hdlicoptAre  de  la  clasae  647  tonnes  avec  une  Vitesse  de  croisiAre  de 
l'ordre  de  27 0  km/h. 

Le  magndtomAtre  a  ete  instalie  dans  la  queue  de  1 'hdlicoptAre  dans  un  endroit  magnet iquement  propre 
et  pas  trop  perturbe. 

4.2.2.  Rdsultats  obtenus 

Cette  premifere  evaluation  qui  a  eu  lieu  en  197?  a  permis  de  roontrer  la  validite  du  principe  d’autocom- 
pensation  et  la  capacite  du  cap  determine  4  satisfaire  une  performance  en  navigation  correcte. 

La  representation  sur  la  figure  8  des  erreurs  de  cap  avant  et  aprAs  compensation  montre  l'efficacite 
de  1' autocompensation  qui  permet  d'obtenir  des  erreurs  de  cap  inferieures  4  0.5°. 

On  n'avait  pas  pu  tirer  des  conclusions  sur  les  performances  de  ce  systAme  en  navigation  car  trop  peu  de 
mesures  avaient  ete  effectudes. 

4.3.  Easai  du  systAme  de  navigation  sur  GAZELLE 

4.3.1.  Presentation  de  1' installation 

L 'hdlicoptAre  GAZELLE  est  un  hdlicoptAre  de  la  classe  2  tonnes  avec  une  vitcsse  de  croiseur  de  l'ordre 
de  250  km/h. 

Le  megnetomfetre  a  At6  instalie  en  arriAre  du  doppler  sous  l'emplanture  dr  queue  de  l'heiicopt Are. 

4.3.2.  Rdsultats  obtenus 

Les  esBais  du  systAme  ont  Ate  mends  en  1982  et  1983,  en  deux  dtopn  sucressives  : 

.  une  phase  de  mise  au  point,  suivie  d'une  courte  pdriodr  d'6valuntion  a  ete  mende  au  C.f.V. 
de  Brdtigny  sur  Orge. 

.  une  phase  plus  longue  devaluation  opdrationnel le. 
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Aprfcs  une  p6riode  de  mise  au  point,  les  essais  ont  montre  un  bon  comportement  de  1 ' autompensat ion, 
r6alis6e  en  moyenne  en  A  minutes,  b  1* issue  d’une  procedure  comportant  en  tout  quatre  A  cinq  vi rages 
b  inclinaison  differente  (  +  30° ,  +.  45°  ,  +  60°). 

A  titre  d'exemple,  la  courbe  de  regulation  presentee  figure  7  montre  l'efficacite  de  1 ' autocompensat ion 
erreur  de  cap  comprise  entre  -  0,5  et  +  0,4  degres. 

revaluation  operat ionnelle  du  systfcme  a  6te  effectuee  d'une  part  pour  1 ' autocompensat ion,  d'autre 
part  pour  la  navigation. 

Autocompensation 

Une  vingtaine  d* autocompensat ions  ont  ete  realisees  en  tout,  avec  des  equipages  differents  les  uns  des 
autres  et  non  specialises. 

Ces  elements  soot  particuliferement  importants  puisqu'ils  correspondent  bien  aux  conditions  opera- 
tionnelles. 

I' autocompensat ion  est  realisee  par  une  procedure  comportant  4  ou  5  virages,  necessitant  4  b  5  minutes 
de  vol. 


Les  reactions  enregiatrees  demontrent  une  entifere  satisfaction  des  utilisateur9  6  l'egard  de  la  method? , 
ainsi  que  des  resultats  qui  se  sont  reveies  trfes  stables. 

Reaultats  des  vol9  de  navigation  (transit) 

Deux  cent  quatre  vingt  huit  (288)  branches  ont  ete  rdalisdes,  d'une  longueur  comprise  entre  25  et  45  km 
A  des  vitesses  de  l'ordre  de  180  km/h  b  220  km/h. 

Les  resultats  sont  eonsignes  sur  la  courbe  figure  8.  Ils  correspondent  &  une  performance  globale  de  : 
1,7  %  de  la  distance  parcourue  dans  95  %  dee  cas. 

Resultats  des  vols  tactiques 

Quatre  vingt  branches  de  vol  tactique  d'une  dur6e  de  15  minutes  environ  ont  ete  r6alisees. 

Les  resultats  sont  eonsignes  sur  la  figure  12  ou  la  performance  globale  est  de  s 
450  m  par  quart  d’heure  de  vol  dans  95  %  des  cas. 


5.  CONCLUSION 

Les  resultats  obtenus  au  cours  des  differents  essais  ont  permis  d'ameiiorer  progressivement  les  perfor¬ 
mances  de  la  fonction  "cap  autocompense  par  magnetomfctre  statique". 

Au  vu  des  divers  resultats  obtenus  et  officiellement  constates,  le  magnetomfetre  statique  const  it ue 
une  source  de  cap  magnetique  autocompense,  de  haute  qualite,  liberant  1 ' utilisation  des  contraintes 
liees  b  la  compensation  periodique  de  la  machine  et  apte  b  realiser  une  navigation  Doppler  de  haute 
precision,  conforme  aux  exigences  operat ionne lies  de  l'Armee  frangaise  soit  par  exemple  avec  un  GV  76 
et  un  RDN  80  B. 


2  %  de  la  distance  parcourue 
500  m  par  quart  d'heure 


sur  terre,  b  95  % 
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A  COST-EFFICIENT  CONTROL  PROCEDURE 


THE  BENEFIT  OF  ALL  AIRSPACE  USERS 


Andre  Benoit*  and  Sip  Swierstra 


European  Organisation  for  the  Safety  of  Air  Navigation 
EUROCONTROL 

Rue  de  la  Loi,  72,  B-1040  Bruxelles 


Provided  adequate  directives  are  generated  by  an  advanced  ATC  system,  the  use  of  onboard  computers  in 
guidance ,  navigation  and  control  eyeteme  will  make  it  possible  for  flights  to  be  conducted  in  such  a  way 
as  to  agree  closely  with  optimisation  directives  irrespective  of  the  particular  criterion  used  and  of 
whether  the  context  is  a  civil  or  military  one.  In  addition ,  the  air/ground  control  coordination  will  be 
efficiently  performed  by  means  of  automated  digital  data  cormunications .  Advances  in  the  relevant  techno¬ 
logies  can  be  expected  to  continue  and  as  such  advances  are  brought  into  actual  use  the  control  environ¬ 
ment  will  change  accordingly.  However,  the  new  facilities  and  equipment  involved  will  probably  be  expens- 
eive  to  purchase  and  run,  and  much  attention  will  need  to  be  given  to  the  cost  aspect  of  their  utilisation. 

We  are  therefore  proposing,  in  this  context,  a  control  procedure  for  conducting  time-of -arrival-constrain¬ 
ed  flights  in  an  economic  manner.  This  procedure  is  intended  to  be  compatible  with  present-day  voice  comm¬ 
unications  (hunan  or  synthetic)  although  it  is  primarily  designed  to  be  used  in  conjunction  with  future 
automated  digital  data  communications. 

The  procedure  is  applicable  to  the  transit  of  flights  through  extended  terminal  areas  such  as  are  con¬ 
sidered  in  connection  with  Zone-of -Convergence- type  systems,  and  the  final  approach  phase  is  accordingly 
integrated  with  the  en  route  descent,  cruise  and  (possibly)  climb  phases,  or  appropriate  parte  thereof. 

The  paper  contains  a  detailed  description  of  the  procedure,  together  with  brief  summaries  of  the  tests 
conducted  in  present  and  simulated  future  environments  to  assess  its  efficiency,  and  then  sets  out  the 
results  obtained  to  date  and  analyses  them  in  terms  of  4-d  navigational  accuracy  and  operational  effecti¬ 
veness. 

1*  INTRODUCTION 

An  air  traffic  control  system  rethought  in  the  light  of  present  economic  constraints,  in  particular  one 
enabling  duly  selected  trajectories  to  be  followed,  certainly  brings  about  an  appreciable  reduction  in  the 
overall  coat  of  flights  (Refs.  1,  2).  At  European  medium-to-high-density  traffic  airports,  such  as 
Brussels  and  London,  proper  Integration  of  en-route  and  approach  control  can  be  expected  to  lead  to  a 
reduction  of  some  10  to  20  per  cent  in  the  fuel  actually  burned  by  the  Inbound  traffic  in  the  zones  of 
convergence  including  and  surrounding  these  terminal  areas  (Ref.  3). 

Efforts  have  been  made  in  several  quarters  in  Western  Europe  to  determine  optimum  trajectories  for  each 
individual  aircraft  in  relation  to  overall  traffic,  with  emphasis  on  specific  criteria,  such  as  maximum 
use  of  available  landing  capacity,  minimum  cost  of  total  flights  inbound  to  a  given  terminal  area,  or 
minimum  deviation  from  the  profiles  requested  by  operators  (Refs.  4  to  10).) 

In  the  case  of  all  the  approaches  proposed  or  described  in  References  4  to  10,  the  trajectory  of  each 
Inbound  flight  is  normally  tlae-of-arrival-constralned  as  a  result  of  the  optimisation  process  applied  to 
the  overall  traffic.  Accordingly,  for  a  Zone-of-Convergence-type  control  system,  it  is  essential  to  select 
an  appropriate  trajectory  for  each  Individual  aircraft  and  control  it  with  a  high  degree  of  accuracy.  With 
flight  management  computer  systems  configured  for  4-d  navigation,  the  conduct  of  the  flight  could  be  con¬ 
trolled  within  a  few  (2-5)  seconds  (Ref.  11).  But  what  could  be  achieved  with  present  modes  of  operation, 
and  currently  available  navigation  equipment  and  control  facilities? 

Developments  have  been  undertaken  in  order  to  define  and  assess  a  ground/alr  coordinated  control  procedure 
which  would  permit  accurate  control  under  present-day  operational  conditions  (Ref.  12).  Obviously,  for  the 
efficient  use  of  such  a  procedure  the  ground-based  control  would  require  adequate  automated  aids,  under¬ 
pinned  by  a  detailed  knowledge  of  the  aircraft  operation  and  performance  characteristics.  The  successive 
control  actions  resulting  from  landing  time  alot  allocation,  and  prediction  reliability,  necessitate  »u 
air/ground  control  procedure  program  operated  on-line,  for  raising,  confirming  and  updating  the  requisite 
control  directives,  Including  ground/  air  control  message  generation. 

The  present  paper  describes  the  ground/alr  coordinated  procedure  proposed  for  the  accurate  control  of 
trajectories  and  gives  a  summary  of  the  tests  conducted  lo  date,  A  subsequent  dissertation  will  present 
the  structure  and  mode  of  operation  of  a  suitable  program  to  raise  the  successive  control  directive-.. 

7b*.  A.  He  unit  is  also  tfiargd  do  court , 
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2.  cioPHP/Aia  ccamtOL  procedure 

The  definition  of  such  a  procedure  was  Intended  to  establish  the  directives  needed  to  control  accurately 
the  trajectory  of  an  aircraft  down  to  the  runway,  the  tine  of  arrival  being  constrained.  The  essential 
requirements  Include  compatibility  with  on-line  operation.  In  particular  with  present  navigation  capa¬ 
bility  and  voice  (human  or  synthetic)  communications,  easy  adaptation  to  automated  digital  ground/air 
communications,  reliability  in  terns  of  messages  generated  and  suitability  to  cope  with  the  expected  range 
of  aircraft  types  and  a  variety  of  on-board  control,  guidance  and  navigation  facilities. 

2.1 .  Individual  alrcraf t-tra jectorlea  versus  air  traffic 

In  a  ZOC-type  system,  the  ZOC  aequencer/schedulsr  proposes  an  initial  landing  slot  time  when  the  aircraft 
enters  the  system.  When  doing  so,  It  may  update  the  time  of  arrival  of  other  aircraft,  possibly  modifying 
the  landing  aequance  determined  previously.  This  must  obviously  be  consistent  with  (a)  Individual  flight 
requirements  and  (b)  the  optimization  criterion  applied  to  the  overall  traffic,  the  Instantaneous  and 
local  constraints  and  the  control,  variables  which  are  or  remain  available  at  that  moment.  To  keep  the 
number  of  ground/air  control  actions  within  reasonable  limits,  the  aim  is,  wherever  possible,  to  associate 
only  one  control  directive  to  each  basic  phase  of  the  inbound  flight,  namely  cruise  or  part  thereof,  en- 
routa  descent,  and  final  descent  and  landing.  The  relevant  actions  and  messages  will  be  described  in  sub¬ 
sequent  paragraphs. 


CTL-0 


SCHEMATIC  CONFIGURATION  OF  AN  INBOUND  FLIGHT  TO  FRANKFURT 
Figure  2-1 
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The  ground  sequencer/scheduler  derives  for  each  Individual  aircraft  the  trajectory  which  Beets  an  overall 
criterion.  In  general,  the  Individual  operator's  criterion  will  be  the  same  as  the  criterion  used  to 
control  the  overall  traffic,  in  particular  where  "cost  of  flight**  Is  used.  Nevertheless,  Individual 
operators*  criteria  may  be  altered,  even  on-line,  and  the  ground  optimization  process  will  make  provision 
for  this.  One  possible  way  of  coping  readily  with  on-line  requests  would  consist  In  Introducing  them  In 
terms  of  preferential  profiles  and  minimizing  the  overall  deviation  from  such  profiles.  Whatever  the 
criteria  implemented  by  the  ground-based  system,  the  automated  sequencer/scheduler  should  propose  an 
optimum  or  sub-optimum  landing  slot  and  an  associated  trajectory  to  meet  this  slot.  This  paper  concerns 
Itself  with  the  **lmplementationM  and  accurate  control  of  such  a  trajectory,  regardless  of  the  criterion 
leading  to  its  definition.  However,  it  should  be  understood  that  the  determination  of  such  a  trajectory 
results  from  the  Integration  of  management  and  control  over  the  complete  flight  conducted  within  the 
Zone-of -Converge nee  geographical  area,  including  cruise,  en  route  descent  and  final  descent  until  touch 
down. 


2.2.  Definition  of  an  optimum  tlne-of-arrlval-cons trained  trajectory 

The  trajectory  proposed  for  the  flight  from  entry  to  touch-down,  say  from  Rekken  to  Frankfurt  airport  as 
In  the  schematic  configuration  shown  in  Figure  2-1,  will  normally  be  composed  of  three  main  phases,  namely 
the  cruise  phase,  the  en  route  descent  and  the  final  descent  to  touch-down.  The  en-route  component  will 
essentially  be  controlled  by  cruise  and  dascent  speeds  expressed  in  terms  of  Mach/CAS  profiles,  while  the 
control  of  the  final  descent  will  also  depend  on  the  local  geographical  configurations  and  may,  in  addi¬ 
tion,  include  the  precise  definition  of  the  final  path  as  a  control  parameter.  Clearly,  any  transition 
between  successive  phases  (following  the  entry  of  the  aircraft  to  the  ZOC  cruise  conditions,  from  cruise 
to  en  route  descent,  from  en  route  to  final  descent)  will  need  to  be  defined  accurately,  with  no  ambiguity 
as  to  the  resulting  trajectory  (in  present  ATC  operation,  for  Instance,  clearance  to  descent  Implies  no 
particular  transition  to  descent  nor  any  specific  descent  trajectory.) 

Normally,  the  selection  of  the  flight  characteristics  should  result  from  the  criterion  versus  time-of- 
translt  relationship.  For  the  contribution  of  a  particular  aircraft,  the  corresponding  relation  (C) 
appears  as  shown  schematically  in  Figure  2-2.  The  Influencing  parameters  Include  the  aircraft  mass,  the 
cruise  altitude  and  speed,  the  en  route  descent  speed,  the  descent  being  currently  conducted  at  or  near 
idling  conditions,  the  geometrical  path  and  speed  profile  for  the  final  descent  and  the  atmospheric,  wind 
and  temperature  conditions.  For  given  entry  conditions  (mass,  altitude,  speed)  and  a  given  route  to  touch¬ 
down,  each  point  of  curve  C  corresponds  to  a  specific  trajectory  for  which  the  overall  speed  profile  is 
determined.  The  preferential  trajectory  minimizes  the  criterion  (flight  duration  and  criterion  value  are 
noted,  tpr  and  c,  respectively,  on  the  diagram).  The  ZOC-recownended  trajectory  requires  a  transit  dura¬ 
tion  t  and  leads  to  the  criterion  value  c*.  With  respect  to  the  preferential  speed,  adjustments  provide  a 
control  range  which  extends  from  c  to  a  for  advanced  arrival  (tpr,  ta)  and  from  c  to  b  for  delayed  arrival 
(tpr,  tb).  For  the  en  route  phase  from  entry  to,  say,  5,000  ft,  it  is  appropriate  to  Introduce  a  smooth 
cruiae-to-deacent  transition  for  which  both  cruise  and  descent  speed  components  are  expressed  by  the  same 
speed  indication.  Usually,  the  relevant  approximation  of  the  criterion,  curve  S,  is  quite  satisfactory, 
suggesting  that  the  initial  trajectory  could  be  selected  accordingly. 


DEFINITION  OF  AN  OPTIMUM  TIME-OF-ARRIVAL-CONSTRATNF.P  TRAJECTORY 
Figure  2-2 
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2*3.  Control  points  tfl4  A/G  massages 

For  convenience,  tho  flight  within  the  integrated  control  area  will  be  considered  as  being  aade  up  of 
three  phases,  as  follows. 

A  preparatory  phase,  starting  when  the  aircraft  is  notified  to  the  ZOC  Management  Centre.  It  consists  in 
making  a  prediction  of  the  runway  load  based  on  all  the  Information  available,  estimates  of  all  entries 
Included,  and  accordingly  assigning,  tentatively,  a  preliminary  landing  slot  to  the  aircraft  entering.  It 
ends  with  the  transfer  of  control  and  the  ground-to-air  massages  acknowledging  the  information  received 
prior  to  entry. 

The  an  route  phase,  which  follows.  The  flret  ground-to-air  message  confirms,  or  otherwise,  cruise  altitude 
amd  route,  than  the  firat  ZOC  meaaage  la  prepared  and  aent  to  the  aircraft.  It  Is  ssnt  as  early  as 
possible  after  entry,  end  includes  routs,  new  cruiee  speed  and  the  position  at  which  to  Initiate  transi¬ 
tion  from  antry  spend  to  new  cruiee  speed,  this  position  being  expressed  in  terms  of  DME  distance  from  an 
appropriately  located  station,  Dortmund  In  the  case  of  the  configuration  Illustrated  (Figure  2-1).  A 
second  ZOC  message  will  be  Issued  subsequently.  This  message  contains  the  en  route  descent  characteristics, 
namely,  the  position  of  the  Initiation  of  tha  transition  from  cruise  to  descent,  noted  CTL-2  In  Figure 
2-1,  also  expressed  in  terms  of  DKE  distance  from  a  suitably  located  station  (Frankfurt  In  the  Illustra¬ 
tion),  the  en-route  descent  speed  profile  (Mach/CAS),  confirmation  of  tha  route,  possibly  hlgh-altltude 
holding  directives  and  the  estimated  arrival  conditions  (time  and  altitude)  over  the  next  active  control 
point  (noted  CTL-3  In  Figure  2-1)  also  defined  in  terms  of  DME  distance  from  a  suitable  station,  Frankfurt 
FFM  in  tha  example  of  Figure  2-1. 

The  final  daacent  phase,  including  a  number  of  messages  and  actlva  control  points  (CTL-3(a),  (b),  etc.), 
which  will  depend  on  the  local  geographical  configuration  and  type  of  approach  considered.  This  phase  Is 
critical  and  will  ba  discussed  In  detail  In  a  subsequent  section. 

The  tests  made  to  assess  the  feasibility  of  the  procedure,  the  accuracy  of  the  4-d  controlled  trajectory, 
during  both  the  en-route  and  final  descent  phases,  and  the  range  available  for  correction,  whatever  the 
sources  of  dispersion,  will  be  summarised  and  discussed  In  subsequent  sections. 

3.  EN-ROUTE  CRUISE /DESCENT  PHASE 


3.1 .  Overview 


This  phase  has  been  discussed  previously  (Refs.  13  to  16)  and  it  will  accordingly  be  only  outlined  In  the 
present  paper.  A  total  of  32  flights  were  conducted  on  the  route  Pampus  (PAM),  Dortmund  (DOM), 
Germlnghausen  (GMH) ,  Limburg  (LIM),  Metro  (MTR).  The  flights  were  conducted  using  aircraft  flight  simula¬ 
tors:  Boeing  737  and  Airbus  A-300  from  the  Deutsche  Lufthansa,  Flight  Simulation  Department,  McDonnell 
Douglas  DC-10  from  SABENA,  Belgian  World  Airlines  and  Fokker  FK-28  from  the  Dutch  National  Aerospace 
Research  Laboratory.  A  summary  of  the  flights  conducted  is  given  In  Table  3-1.  The  control  directives  to 
be  sent  to  the  pilot  were  generated  on-line.  Both  voice  and  automated  digital  communications  were 
considered,  and  in  each  mode  of  operation  the  directions  were  sent  some  30  to  60  seconds,  depending  on  the 
occasion,  before  the  required  action  had  to  be  initiated. 

The  alms  of  the  tests  conducted  covered  three  essential  aspects,  namely  (a)  the  practical  operational 
character  of  the  procedure  (generation,  transmission  and  acknowledgement  of  the  control  directives),  (b) 
the  accuracy  of  the  en-route  component  of  the  4-d  trajectory  from  entry  into  the  ZOC  control  area  to  the 
assembly  point  represented  by  Metro,  5,000  ft.  In  these  exercises,  and  (c)  the  range  of  control  available 
prior  to  the  final  descent. 

The  scenario  of  each  flight  Is  In  line  with  the  procedure  described  in  Section  1.  The  time  of  transit  is 
determined  at  entry  (at  the  latest  some  30  to  60  seconds  before  CTL-1);  the  relevant  CTL-1  position  and 
cruise  speed  ate  accordingly  sent  to  the  aircraft.  Subsequently,  the  en-route  descent  characteristics 
(position  of  the  relevant  control  point,  CTL-2,  and  speed  profile)  are  also  sent  from  30  to  60  seconds  In 
advance,  and  the  aircraft  proceeds  to  the  assembly  point,  here  Metro.  There,  the  altitude  and  time  are 
compared  against  the  Initial  prediction.  The  procedure  to  be  followed  was  explained  to  the  pilots  prior  to 
their  flights  by  means  of  s  short  briefing. 


FLIGHTS 

ROUTE 

LENGTH 

AIRCRAFT 

OPERATORS 

PERIOD 

REPORT 

5 

RKN-MTt 

HO 

1737 

LUFTHANSA  PILOTS 

JUL.  81 

812020 

3 

RKN-MTt 

U0 

A-300 

LUFTHANSA  PILOTS 

JUL.  81 

812020 

7 

PAM-MTR 

201 

DC-10 

SABENA  CHIEF  INSTRUCTOR 

MAR.  8? 

822028 

9 

PAM- MTR 

701 

DC- 10 

SABENA  CHIEF  INSTRUCTOR 

NOV.  82 

832028 

4 

PAM-MTR 

201 

i-717 

LUFTHANSA  PILOTS 

MAR.  83 

2 

PAM-MTR 

201 

A-300 

LUFTHANSA  PILOTS 

MAR.  83 

832028 

l 

PAM-MTR 

201 

FK-28 

NLR  PILOT 

DEC.  83 

84E1/TN 

1 

GMH-MTR 

FK-28 

NLR  PILOT 

0EC.  83 

84E1/TN 

SUMMARY  OF  32  KN-ROllTE  CRUISE/ DESCENT  TESTS  CONDUCTED  ON  AIRCRAFT  FLIGHT  SIMULATORS 

Table  3-1 
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2.3.  Control  point*  god  A/G  messages 

for  convenience,  the  flight  within  the  Integrated  control  area  will  be  considered  as  being  made  up  of 
three  phaaes,  as  follows. 

4  preparatory  phase,  starting  when  the  aircraft  Is  notified  to  the  ZOC  Management  Centre.  It  consists  In 
making  a  prediction  of  the  runway  load  based  on  all  the  information  available,  estimates  of  all  entries 
included,  and  accordingly  assigning,  tentatively,  a  preliminary  landing  slot  to  the  aircraft  entering.  It 
emds  with  the  transfer  of  control  and  the  ground- to-alr  messages  acknowledging  the  Information  received 
prior  to  entry. 

The  an  route  phase,  which  follows.  The  first  ground-to-air  message  confirms,  or  otherwise,  cruise  altitude 
and  route,  then  the  first  ZOC  message  is  prepared  and  sent  to  the  aircraft.  It  is  sent  as  early  as 
possible  after  entry,  and  includes  route,  new  cruise  speed  and  the  position  at  which  to  Initiate  transi¬ 
tion  from  entry  speed  to  new  cruise  speed,  this  position  being  expressed  In  terms  of  DME  distance  from  an 
appropriately  located  station,  Dortmund  in  the  case  of  the  configuration  Illustrated  (Figure  2-1).  A 
second  ZOC  message  will  be  issued  subsequently.  This  message  contains  the  en  route  descent  characteristics, 
namely,  the  position  of  the  initiation  of  the  transition  from  cruise  to  descent,  noted  CTL-2  In  Figure 
2-1,  also  expressed  in  terms  of  DME  distance  from  a  suitably  located  station  (Frankfurt  in  the  illustra¬ 
tion),  the  en-route  descent  apeed  profile  (Mach/CAS),  confirmation  of  the  route,  possibly  hlgh-altltude 
holding  directives  and  the  estimated  arrival  conditions  (time  and  altitude)  over  the  next  active  control 
point  (noted  CTL-3  in  Figure  2-1)  also  defined  in  terms  of  DME  distance  from  a  suitable  station,  Frankfurt 
FFM  In  the  example  of  Figure  2-1. 

The  final  descent  phase,  Including  a  number  of  messages  and  active  control  points  (CTL-3(a),  (b),  etc.), 
which  V 11  depend  on  the  local  geographical  configuration  and  type  of  approach  considered.  This  phase  is 
critical  and  will  be  discussed  in  detail  in  a  subsequent  section. 

The  tests  made  to  assess  the  feasibility  of  the  procedure,  the  accuracy  of  the  4-d  controlled  trajectory, 
during  both  the  en-route  and  final  descent  phases,  and  the  range  available  for  correction,  whatever  the 
sources  of  dispersion,  will  be  summarised  and  discussed  In  subsequent  sections. 

3.  EN-ROUTE  CRUISE/DESCENT  PHASE 


3.1.  Overview 


This  phase  has  been  discussed  previously  (Refs.  13  to  16)  and  it  will  accordingly  be  only  outlined  in  the 
present  paper.  A  total  of  32  flights  were  conducted  on  the  route  Pampus  (PAM),  Dortmund  (DOM), 
Germinghausen  (GMH),  Limburg  (LIM),  Metro  (MTR).  The  flights  were  conducted  using  aircraft  flight  Simula' 
tors:  Boeing  737  and  Airbus  A-300  from  the  Deutsche  Lufthansa,  Flight  Simulation  Department,  McDonnell 
Douglas  DC- 10  from  SABENA,  Belgian  World  Airlines  and  Fokfcer  FK-28  from  the  Dutch  National  Aerospace 
Research  Laboratory.  A  summary  of  the  flights  conducted  is  given  in  Table  3-1.  The  control  directives  to 
be  sent  to  the  pilot  were  generated  on-line.  Both  voice  and  automated  digital  comsiunlcatlons  were 
considered,  and  In  each  mode  of  operation  the  directions  were  sent  some  30  to  60  seconds,  depending  on  the 
occasion,  before  the  required  action  had  to  be  Initiated. 

The  alms  of  the  tests  conducted  covered  three  essential  aspects,  namely  (a)  the  practical  operational 
character  of  the  procedure  (generation,  transmission  and  acknowledgement  of  the  control  directives),  (b) 
the  accuracy  of  the  en-route  component  of  the  4-d  trajectory  from  entry  into  the  ZOC  control  area  to  the 
assembly  point  represented  by  Metro,  5,000  ft.  In  these  exercises,  and  (c)  the  range  of  control  available 
prior  to  the  final  descent. 

The  scenario  of  each  flight  Is  in  line  with  the  procedure  described  In  Section  1.  The  time  of  transit  is 
determined  at  entry  (at  the  latest  some  30  to  60  seconds  before  CTL-l);  the  relevant  CTL-1  position  and 
cruise  speed  are  accordingly  sent  to  the  aircraft.  Subsequently,  the  en-route  descent  characteristics 
(position  of  the  relevent  control  point,  CTL-2,  and  speed  profile)  are  also  sent  from  30  to  60  seconds  In 
advance,  and  the  aircraft  proceeds  to  the  assembly  point,  here  Metro.  There,  the  altitude  and  time  are 
compared  against  the  initial  prediction.  The  procedure  to  be  followed  was  explained  to  the  pilots  prior  to 
their  flights  by  means  of  e  short  briefing. 


FLIGHTS 

ROUTE 

LENGTH 

AIRCRAFT 

OPERATORS 

PERIOD 

REPORT 

5 

RKN-KTR 

H0 

8737 

LUFTHANSA  PILOTS 

JUL.  81 

812020 

3 

RKN-MTR 

U0 

A-300 

LUFTHANSA  PILOTS 

JUL.  81 

812020 

7 

PAM-NTR 

201 

OC-1 0 

SABENA  CUTF.P  INSTRUCTOR 

MAR.  82 

822028 

9 

PAM-MTR 

201 

DC- 10 

SABENA  CHIF.K  INSTRUCTOR 

NOV.  82 

832029 

4 

PAM-MTR 

201 

B-737 

LUFTHANSA  PILOTS 

MAR.  83 

832028 

2 

PAM-MTR 

201 

A-300 

LUFTHANSA  PILOTS 

MAR.  83 

832028 

1 

PAM-MTR 

201 

FX-28 

MLR  PILOT 

DEC.  83 

84P.1  /PN 

l 

GMM-MTR 

68 

FK-28 

NLR  PILOT 

DEC.  83 

B4K1/TN 

SUMMARY  OF  32  EN-ROUTE  CRUtSR/DRSCENT  TESTS  CONDUCTED  ON  AIRCRAFT  FLIGHT  SIMULATORS 

Table-  3  I 
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3.2.  Summary  of  results 


Clearly,  the  result*  obtained  over  a  sample  of  32  flights  cannot  claim  to  have  any  statistical  value. 
Nevertheless,  they  provide  an  amount  of  Information  sufficient  to  establish  sound  recommendations  for  sub¬ 
sequent  development. 

It  appears  that:  (a)  the  procedure  proposed  Is  compatible  with  present  ATC  and  A/C  modes  of  operation, 
although  significant  differences  are  noticeable  when  referred  to  present  day  operation.  These  relate,  in 
particular,  to  the  use  of  combined  crulse/desceat  speed  profiles  appreciably  different  from  those 
currently  followed.  Further,  the  Initiation  of  the  transition  from  entry  to  cruise  (CTL-1)  and  from  cruise 
to  descent  (CTL-2)  are  determined  accurately  In  terms  of  DM£-related  position,  which  differs  appreciably 
from  present  practice.  Obviously,  such  points  will  require  particular  attention  from  the  crew,  besides 
which,  the  flights  could  be  considered  as  "routine",  whether  conducted  manually  or  using  the  autopilot 
modes  available. 

(b)  The  trajectory  control  accuracy  has  been  determined  throughout  the  flight,  In  particular  at  the 
characteristic  points  (way  points  and  control  points).  In  this  summary.  It  will  be  sufficient  to  quote  the 
errors  noted  at  the  assembly  point,  Metro  In  terms  of  both  altitude  and  time.  Over  the  set  of  32  flights 
conducted,  the  absolute  value  of  the  error  observed  In  the  time  of  arrival  was  less  than  25  seconds  In  84 
percent  of  the  cases.  The  greatest  error  obeerved  was  44  seconds.  The  average  error  (ebeolute  value)  was 
16  secomds  (standard  deviation:  11  seconds).  The  difference  In  altitude  was.  In  particular,  affected  by 
the  accurate  Indication  of  the  cruise  to  descent  transition.  If  two  flights  are  discarded,  simply  because 
It  was  clear  that  the  pilot  had  "forgotten"  to  Initiate  the  descent  at  the  recommended  position,  the  mean 
value  of  the  error  obeerved  (absolute  value)  Is  of  the  order  of  260  feet. 

3.3.  Updates  and  trajectory  corrections 

In  practice,  trajectory  updates  will  be  combined  with  ATC  time-of -arrival  modifications.  During  these 
experiments,  ATC  corrections  were  introduced  such  as  to  use  the  entire  tlme-of-arrival  control  range  com¬ 
patible  with  the  aircraft's  operational  allowable  speed  range. 

Accordingly,  it  is  expected  that  the  time  of  arrival  over  the  assembly  point  can  be  controlled  to  within 
some  30  seconds,  thla  error  being  accounted  for  mainly  by  wind  uncertainties  during  the  en-route  descent. 
Now,  will  it  be  possible  to  compensate  and  provide  the  necessary  corrections  to  maintain  the  arrival 
sequence  on  the  runway  ?  This  point  is  discussed  In  the  next  section. 

*•  FINAL  DESCENT  AND  LANDING 


4.1  Terms  of  the  problem 

When  an  aircraft  la  approaching  the  final  phase  of  the  en-route  descent,  say  over  a  given  geographical 
point  at  an  altitude  of  soae  10,000  to  5,000  feet,  the  deviation  of  the  aircraft  trajectory  from  the 
expected  path  reaults  from  the  accumulation  of  errors  of  all  sources  over  the  descent  and  possibly  part  of 
the  cruise. 


SCHEMATIC  DIRECT  AND  DOWN-WIND  APPROACHES 
Figure  4-1 
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THe  problem  now  amounts  to  amending  the  aubaequent  flight  phase  to  ensure  arrival  on  the  runway  either  (a) 
at  the  Initially  requested  tine  or  (b)  at  an  earlier  or  later  tine  to  Include  possible  alteration  of  the 
landing  tima  sequence,  as  nay  be  necessary  in  the  light  of  the  developments  in  the  traffic  situation. 

Several  types  of  approach  can  be  envisaged,  as  illustrated  In  Plgure  4-1,  where  (a)  corresponds  to  a 
direct  straight  line  approach,  cases  (b)  and  (c)  to  down-wind  or  more  generally  U-shape  approaches,  rela¬ 
ting  to  a  continuous  descent  or  so  interception  of  the  glide  path  in  level  flight. 

For  a  number  of  reasons,  it  was  decided  to  conduct  the  flights  in  the  Brussels  area,  and  two  basic  types 
of  approach  were  considered,  namely  a  direct  straight  line  approach  and  a  typical  U-shape  approach  of 
which  ths  essential  characteristics  will  be  defined  in  Section  4.2. 

Some  21  flights  were  then  conducted  using  the  SABENA  McDonnel  Douglas  DC-10  aircraft  flight  simulator.  The 
main  objectives  included  the  confirmation  of  the  range  of  control  available,  the  feasibility  of  control¬ 
ling  4-d  flights  with  a  high  degree  of  accuracy  in  present  nodes  of  operation,  and  the  effect  of  essential 
control  parameters  on  the  overall  performance. 

4.2  Straight  line  and  U-ahape  approaches 

At  the  time  of  the  exercise,  the  arrival  characteristics  in  the  Brussels  area  appeared  as  shown  in  the  Map 
(Jeppesen,  Arrivals,  Brussels  Area,  2  Dec.  1983)  reproduced  in  Figure  4-2  (Courtesy  of  Jeppesen  GmbH, 
Frankfurt,  FRG).  The  two  approach  routes  considered  are  drawn  in  thick  lines.  The  straight  line  approach 
has  been  conceived  as  follows:  It  extends  over  50  nm  from  XXX,  where  the  flights  were  initiated,  to  the 
runway  (25  L) .  The  U-shape  approaches  are  conducted  along  the  existing  route  Mackel-Dender-Bruno,  the  ini¬ 
tiation  of  the  turning  manoeuvre  taking  place  at  a  precise  distance  from  Bruno,  as  discussed  subsequently. 

4.2.1  Control  of  a  straight  line  approach 


The  control  of  a  straight  line  approach,  as  it  is  considered  here,  will  be  described  using  the  Information 
given  in  Figure  4-3.  In  the  upper  part  of  the  diagram,  the  route  Is  shown  in  dotted  :*ne~>  (x  and  y  coordi¬ 
nates  (eastings  and  northings,  respectively)  are  referred  to  an  origin  chosen  on  the  runway).  The  vertical 
distance  between  the  geographical  route  and  the  continuous  curve  is  proportional  to  the  altitude,  provi¬ 
ding  a  three-dimensional  view  of  the  flight  geometry.  The  lower  part  of  the  diagram  gives  the  altitude  and 
indicated  airspeed  as  recorded  during  the  flight. 

The  aircraft  arrives  over  XXX  at  an  altitude  of  10,000  ft  at  a  speed  of  250  kt  (IAS).  The  relevant  Z0C 
message  is  generated  and  sent  to  the  pilot.  It  contains  the  position  of  Control  Point  3(CTL-3),  here  39nm 
from  BUB  (DME-related  distance)  and  the  definition  of  the  action,  here  a  deceleration  to  233  kt  (IAS), 
then  the  descent  at  that  speed  to  2,000  feet  and,  at  that  altitude,  interception  of  the  ILS  glide  path. 

tlK.GED  BRUSSaS,  BELGIUM 


MUSSELS.  BELGIUM  Ed 


ARRIVAL  ROUTES  SEUXTI.U  FOR  TUI  l-Xi  m  ICF 
(a)  XXX-BUB  (added  to  existing  chart)  (M  MAK-l>KN-(*  HUN) -BUB 

Chart  reduced  from  Brussels  IO-J  Area  C|i,-n  I  ,  J  Dee.  M3 
Copyright  19,  B  August  1**84,  .!■  ep.M-n  t  Co 
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In  such  an  approach  type,  the  en-route  descent  speed  is  the  only  practical  control  of  the  arrival  time. 
With  flights  starting  from  10,000  ft  at  250  kt  (IAS),  the  range  of  control  extends  over  about  3  minutes 
(for  delays  only)  as  Table  4-1  indicates.  Clearly,  reducing  the  speed  in  this  phase  will  increase  the 
consumption  and  a  fortiori  the  cost.  This  increase  may  be  appreciable.  In  the  case  of  a  DC-10,  it  is  of 
the  order  of  150  kg  per  minute  of  delay. 

4.2.2  U-shape  approach 

Figure  4-4  shows  a  U-shape  approach  and  its  essential  control  characteristics  (the  same  type  of  presenta¬ 
tion  as  was  used  for  the  straight  line  approach).  In  this  illustration,  the  aircraft  comes  from  Mackel, 
it  is  in  level  flight,  at  altitude  10,000  ft  and  a  speed  of  250  kt  (IAS).  The  procedure  Includes  three 
control  points  (CTL-3A  to  C),  where  the  relevant  directives  contained  in  the  corresponding  Z0C  messages 
have  to  be  initiated.  As  for  the  en-route  parts,  the  messages  are  available  at  least  30  to  90  seconds 
before  the  times  of  initiation.  Position  and  CTL-3A  and  B  are  defined  in  terms  of  BUN  DME-related 
distances,  while  the  position  of  CTL-3C  is  determined  by  the  orientation  of  the  axis  aircraft  -  Brussels 
outer  marker  beacon(OB). 

The  directives  (contents  of  ZOC  messages  3A  to  C)  corresponding  to  a  particular  flight  are  listed  in  the 
upper  part  of  the  diagram  (Fig.  4-4). 

In  euch  an  approach  type,  the  control  possibilities  Include,  of  course,  the  en-route  descent  speed  adjust¬ 
ment  as  for  a  straight  line  approach.  Nevertheless,  in  addition,  the  parameters  which  govern  the  final 
path  provide  further  control  for  the  time  of  arrival:  some  2.5  minutes.  This  will  be  discussed  in  more 
detail  below. 

4.3  Control  of  time  of  arrival:  Range  and  governing  parameters 

4.3.1  Straight  line  approach 

As  already  indicated,  the  governing  control  parameter  is  the  descent  indicated  airspeed.  It  has  been 
pointed  out  above  that  when  the  adjustment  (correction  for  previously  accumulated  errors  and/or  modifica¬ 
tion  of  the  landing  time  slot  as  a  result  of  traffic  evolution)  is  initiated  at  10,000  feet,  the  range 
available  amounts  to  three  minutes.  Clearly,  this  range  Increases  if  the  ZOC  control  point  CTL-3  is  envi¬ 
saged  at  a  higher  altitude.  Table  4-1  summarizes  the  results  obtained  for  a  series  of  five  flights,  the 
initial  en-route  descent  being  conducted  at  250  kt  (IAS),  and  the  adjustments  resulting  from  decelerations 
to  233,  210,  185  and  170  kt  (IAS),  respectively.  An  illustration  of  the  flights  observed  as  a  result  of 
the  directives  (such  as  shown  in  Figure  4-3,  upper  part)  is  given  in  Figure  4-5  for  the  horizontal  view, 
altitude  and  speed  versus  distance. 

4.3.2  U^hapeaggroach 

Besides  the  descent  speed,  which  of  course  plays  a  role  similar  to  that  in  the  straight  line  approach, 
additional  governing  parameters  are  available  to  adjust  the  time  of  arrival  on  the  runway,  namely  the 
position  of  the  turning  point  to  the  baseleg  (CTL-3B),  the  direction  of  this  segment  (CTL-3C)  and 
possibly,  the  top-of-descent  or  transition  to  descent  position  (CTL-3A)  where  a  phase  of  horizontal  flight 
has  been  introduced  at  low  altitude  (such  as  10,000  ft  in  Figure  4-4). 

The  range  of  control  associated  with  each  of  these  parameters  appears  in  Table  4-2,  while  Figure  4-6 
illustrates  the  use  of  descent  speed  control.  It  shows  two  flights  following  the  same  approach  (that  of 
flight  FI  in  Table  4-2  (a)),  the  definition  of  the  flights  differing  in  the  descent  speeds  from  10,000 
feet,  namely  250  and  185  kt.  The  arrival  times  differ  by  1.3  minutes,  as  against  2.3  minutes  for  the 
straight  line  approach.  When  the  position  of  the  turning  point  (CTL-3B)  varies  from  6.1  to  2.1  nm,  DME- 
related  distance  from  Bruno,  the  time  of  arrival  increases  by  some  2.3  minutes.  The  flights  are  given  In 
Table  4-2(a),  and  an  Illustration  (horizontal  phase)  is  shown  in  Figure  4-7.  If  the  heading  of  the  base- 
!•£  then  varies  from  184  to  144  deg.,  other  parameters  being  kept  unchanged  -  see  Table  4-2(b)  and  Figure 
4-8  -  the  time  of  arrival  varies  by  some  43  seconds.  A  modification  of  the  position  of  control  point  CTL- 
3A,  namely  top-of-dcscent  from  10,000  ft,  see  Figure  4-4,  of  7nm,  DME-related  distance  from  BUN,  would 
provide  the  same  variation  but  at  a  higher  cost  (see  Table  4—2  (c))«  An  Illustration  of  the  flights  made 
(F6,  F7,  F8)  Is  given  in  Figure  4-9. 


Legend  for  Tables  4-1  to  4-4 

d  :  DME-related  position,  In  nm  (BUB  for  straight  line  approaches;  BUN  for  U-shape  approaches 
(TOD:  start  of  final  descent;  bl :  position  at  which  to  Initiate  turn  to  base-leg) 

mf  :  fuel  consumed,  in  kg 

mal  :  aircraft  initial  mass,  in  tons 

t  :  arrival  time  over  the  runway,  In  min.  (ap:  predicted;  a:  obaerved) 
v,jp  :  descent  speed,  in  kt  (IAS) 

:  base-leg  heading.  In  deg. 

I'gp  :  heading  to  outer  marker  beecon  at  which  to  Initiate  turn  to  glide  path,  In  deg. 

:  difference  between  observed  and  requested  time  of  arrival  at  the  runway.  In  sec. 

'nr  :  difference  In  t tme-of-arr I val  for  repeated  flights.  In  ner. 
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STRAIGHT  LINE  APPROACH 
INFLUENCE  OP  EN-ROUTE  DESCENT  SPEED 
Table  4-1 

a)  Effect  of  position  of  turning  point  to  base-le 


dT0D 

(nm) 

vde 

(kt) 

30.6 

250 

30.6 

250 

30.6 

250 

30.6 

250 

30.6 

250 

*bl  'gp  cap  a  af 

(deg)  (deg)  (min)  (sec)  (kg) 


b)  Effect  of  base-leg  headln 


Flight 

No 

dT0D 

(nm) 

i 

vde 

(kt) 

dbl 

(n«) 

1 

(deg) 

(deg) 

FI3 

24.4 

250 

3.8 

184 

235 

F14 

24.4 

j  250 

3.8 

164 

237 

FI  5 

24.4 

250 

3.8 

144 

240 

c)  Effect  of  top-of-descent  position 


Flight 

dT0D 

vde 

No 

(nm) 

(kt) 

F6 

30.6 

250 

F7 

26.6 

250 

F8 

23.6 

250 

U-SHAPK  APPROACHES 
INFLUENCE  OF  MAIN  CONTKOI.  VMiTATil.r.S 

Table  4-2 
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4.4.1  Observation  versus  prediction 


Hie  tine  of  arrival  was  predicted  from  the  initial  point  (XXX  and  Mackel  for  straight  line  and  (/-shape- 
approaches  respectively,  in  both  cases  Initial  altitude  10,000  ft,  initial  speed  250  kt  IAS).  No  subse¬ 
quent  update  was  made,  which  obviously  would  be  possible  in  practice,  in  particular  to  account  for  possible 
subsequent  deviations. 

The  results  obtained  are  summarized  in  Tables  4-1  and  4-2.  The  predicted  time  of  arrival  is  noted  tap,  and 

the  difference  between  the  tine  of  touch-down  and  the  predicted  value  is  noted  • a.  It  is  positive  when  the 

aircraft  lands  later  than  predicted. 

During  a  U-shape  approach  the  maximum  error  observed  did  not  exceed  14  seconds  for  a  series  of  15  flights. 
During  the  experiments,  six  straight  line  approaches  were  made,  and  the  maximum  discrepancy  reached 

21  seconds.  For  the  two  types  of  approach  the  average  values  of  the  absolute  errors  were  found  to  be  6  and 

9  seconds  respectively. 

4.4.2  Influence  of  initial  Mass  on  prediction  accuracy 

All  the  calculations  used  for  predictions  were  made  on  the  assumption  of  an  aircraft  of  initial  mass  of 
160  tons.  Various  investigations  had  Indicated  that  for  en-route  descent  the  effect  of  mass  could  probably 
be  neglected  and  incorporated  in  the  adjustments.  To  confirm  or  otherwise,  the  initial  mass  of  the  air¬ 
craft  was  taken  as  being  equal  to  180  tons  and  the  predictions  made  on  the  assumption  of  a  160-ton  air¬ 
craft.  The  results  obtained  are  presented  in  Table  4-3  and  the  flights  illustrated  in  Figures  4-10  and 
4-11.  For  the  straight  line  approach,  the  error  (8  sec)  is  within  the  order  of  magnitude  noted  previously 
(Table  4-1).  For  the  U-shape  approach  it  is  of  the  same  order  (17  sec)  as  the  highest  value  (14  sec) 
observed  during  the  series  of  15  flights  for  which  the  predictions  were  made  using  the  actual  aircraft 
mass. 


Flight 

No 

mai 

(tons) 

cap 

(min) 

‘a 

(sec) 

(kg) 

Flight 

No 

.mai 

(tons) 

cap 

(min) 

'a 

(sec) 

nf 

(kg) 

FI 

160 

14.87 

+  3 

1285 

F18 

160 

13.68 

+  2 

1175 

FI  1 

180 

14.98 

+17 

1425 

F21 

180 

13.68 

+  8 

1275 

a)  U-shape  approach  (d-jon/dbl  :  30.6/6.1  nm  from  BUN))  b)  Straight  line  approach  (vjG  »  185  kt) 


INFLUENCE  OF  INITIAL  MASS  ON  PREDICTION  ACCURACY 
Table  4-3 


Flight 

(  ar 

*f 

No 

(min) 

(sec) 

(kg) 

F3 

15.94 

0 

1422 

F9 

16.06 

+  12 

1425 

Flight 

No 

ca 

(min) 

(ar 

(sec) 

■f 

(kg) 

Fi 

14.90 

+  3 

1285 

F5 

14.87 

0 

1287 

F12 

15.01 

+14 

1295 

«)  dT0D/dbl  :  30.6/4.1  nm  from  BUN  b)  dT0D/dbl  :  30.6/6.1  nm  from  BUN 

REPEATABILITY  OF  FLIGHT  CONTROL 
OBSERVATIONS  MADE  DURING  U-SHAPE  APPROACHES 

Table  4-4 
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MICROCOPY  RESOLUTION  TEST  CHART 

NATIONAL  BUREAU  OF  STANDARDS-  1963-A 


U-SHAPE  APPROACH:  INFLUENCE  Or  POSITION  OF  TURNING  POINT  TO  BASE-LEG 

Fiture  4-7 


U-SHAPE  APPROACH  :  INFLUENCE  OF  BASE-LEG  HEADING 
Figure  4-8 
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4.4*3  Rggaatabllity  of  accurately  controlled  approaches 

Clearly,  tt  was  of  Interest,  (a)  to  see  whether  the  conduct  of  flights  defined  in  an  identical  manner  (sane 
set  of  CTL-3  messages,  In  particular  in  a  U-shaped  approach)  would  be  conducted  In  the  same  way  and  lead  to 
the  sama  results,  and  (b)  assess  the  dispersion  observed.  For  this  purpose,  two  flights  were  repeated,  once 
or  twice,  two  days  later.  These  are  flights  FI  and  F3,  defined  in  Table  4.2. 

The  results  are  presented  in  Table  4-4  and  Illustrated  In  Figure  4-12.  The  repeatability  is  good,  and  the 
discrepancies  observed  (3,  12,  14  seconds)  are  within  the  range  of  predictability  errors  noted  for  the 
entire  set  of  flights. 

5.  COMCLUSIONS 

Present  air  traffic  developments,  together  with  economic  constraints,  call  for  an  efficient  use  of  the  capa¬ 
city  available,  in  particular  landing  capacity,  and  a  drastic  reduction  in  flight  cost  wherever  possible. 
For  inbound  traffic,  this  in  turn  requires  effective  cooperation  between  en-route  and  approach  control  units 

(a)  to  determine  the  optimum  set  of  landing  times  and  (b)  to  control  each  individual  flight  accordingly. 

A  specific  procedure  is  proposed  for  the  accurate  control  of  individual  4-d  trajectories,  t ime-of-arrival- 
constrained,  over  an  extended  distance  (up  to  250nm  from  touch-down)  using  the  guidance,  control  and  navi¬ 
gation  equipment  currently  available.  To  this  effect,  the  flight  is  considered  as  being  made  up  of  two 
main  phases,  each  being  controlled  by  specific  variables: 

(a)  The  en-route  phase,  which  includes  the  cruise  and  the  en-route  descent;  it  i9  essentially  controlled 
through  the  combined  crulse/descent  speed  profile; 

(b)  The  final  descent,  which  covers  the  transition  from  en-route  descent,  approach  part,  ILS-glide  slope 
Intercept  and  landing. 

The  active  en-route  control  phase  starts  when  the  aircraft  enters  the  integrated  control  area  (such  as  a 
ZOC  area  extending  over  some  140  to  250  nm)  and  is  assigned  a  tentative  landing  time  slot.  The  relevant 
message  including  the  cruise  speed  component  is  sent  to  the  pilot  with  the  precise  position  -  expressed  in 
DME-related  distance  from  a  suitably  located  station  -  at  which  to  initiate  the  transition  from  entry 
speed  to  required  cruise  speed.  Subsequently,  the  ATC  control  system  -  in  view  of  the  evolution  of  the 
traffic  situation  -  may  either  confirm  or  alter  the  initially  allocated  landing  slot.  In  parallel  to  the 
traffic  evolution,  the  progress  of  this  particular  flight  may  differ  from  what  was  expected  and  an  update 
may  become  necessary.  Whether  or  not  the  time  of  arrival  on  the  runway  -  or  at  the  assembly  point  -  is 
confirmed  or  modified,  the  possible  related  adjustment  will  include  any  necessary  trajectory  correction. 
This  leads  to  a  directive  defining  the  en-route  descent  speed  profile.  The  position  at  which  to  initiate 
the  transition  from  cruise  to  descent  is  given  to  the  pilot  in  terms  of  DME-related  distance  (also  from  a 

suitably  located  station),  the  relevant  message  being  sent  from  30  to  60  seconds  beforehand.  Accordingly, 

at  the  assembly  point,  say  between  15,000  and  5,000  ft,  the  errors  accumulated  should  result  only  from  the 
en-route  descent. 

The  final  descent  may  be  initiated  at  any  altitude,  say  between  15,000  and  5,000  ft,  depending  on  the 

magnitude  of  the  adjustment  of  the  time  of  arrival  on  the  runway  which  may  be  required.  This  phase  may  or 

may  not  Include  a  horizontal  part,  it  may  lead  to  a  direct  straight  line  approach  or  tt>  a  particular  geo¬ 
metrical  shape  matching  down-wind  requirements  and  local  geographical  configurations.  In  the  case  of  a 
straight  line  approach,  the  en-route  descent  speed  la  the  only  practical  control  variable.  For  a  descent 
of  a  DC-10  decelerated  to  250  kt  (IAS)  at  10,000  ft,  the  speed  range  available  makes  it  possible  to  adjust 
the  arrival  time  on  the  runway  within  some  three  minutes.  For  a  U-shape  approach  (from  which  an  S-shape 
could  readily  be  derived  whenever  necessary)  the  control  variables  include,  in  addition  to  the  route 
descent  speed  as  for  the  straight  line  approach,  the  position  at  which  to  resume  the  descent  if  Inter¬ 
rupted  at,  say,  10,000  ft  or  to  initiate  the  en-route  descent,  the  position  at  which  to  initiate  the  turn 
to  the  base-leg  and  the  direction  of  the  base-leg  which  governs  the  angle  of  interception  with  the  glide 
path.  Positions  for  initiating  (see  above)  or  resuming  the  en-route  descent  and  initiating  the  turn  to  the 
base-leg  are  given  accurately  in  terms  of  DME-related  distances.  The  position  at  which  the  glide-slope 
Intercept  manoeuvre  is  started  is  defined  by  a  heading  to  the  outer  marker  beacon.  The  adjustments  of  the 
time  of  arrival  on  the  runway  made  possible  through  these  three  parameters  (en-route  descent  speed  control 
not  Included)  depend  mainly  on  the  airspace  available.  In  the  geographical  configuration  used  during  the 
tests  the  observed  ranges  are  found  to  be  of  the  order  of  140,  40,  and  40  seconds  respectively,  when 
considered  independently.  If  these  are  duly  combined,  it  is  felt  that  adjustments  of  the  order  of  2  minutes 
could  readily  be  considered. 

The  proposed  procedure  was  exposed  to  a  series  of  tests  -  for  both  the  en-route  and  the  final  phases  - 
using  aircraft  flight  simulators.  The  results  obtained  to  date  indicate  that  the  following  can  ho 
achieved. 

(a)  compatibility  of  the  procedure  with  both  current  aircraft  operation  and  air  traffic  controller';’ 
directives  structure; 

(b)  compatibility  with  present  human  or  near-future  synthetic  voice  communications; 

(c)  compatibility  with  future  air/ground  automated  digital  rommunicat ions; 

(d)  suitability  to  control  accurately  flights  in  any  ATC  system  aiming  at  precise  times  to  arrive  ,»i 
assembly  points  and/or  on  the  runway; 

(e)  possibility  of  flying  4-d  trajectories  with  current  standard  airborne  equipment,  In  compatibility 
with  present  operation,  with  a  high  degree  of  accuracy,  tt  is  felt  that  coot rol  of  arrival  l Ime  to 
within  some  10  seconds  over  a  200  nm  flight  distance,  should  be  aimed  at. 
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In  conclusion,  Che  procedure  discussed  In  this  peper  appears  suitable  to  control  aircraft  in  a  Zone-of- 
Convergence-type  system  making  It  possible  to  realise  the  expected  benefits  In  terns  of  economy,  cost, 
consumption  and  efficient  use  of  available  capacity. 

Further  assessment  will  include  a  series  of  tests  conducted  on-line  from  an  operational  ATC  centre,  and 
the  related  developments  needed  both  on  the  operational  side  (in  particular  the  form  of  the  A/G  messages) 
and  In  technical  terms  (In  particular,  automatic  generation  of  control  directives. 
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WIND  MODELLING  FOR  INCREASED  AIRCRAFT  OPERATIONAL  EFFICIENCY 

by 

W.  Lechner,  R.  Onken 
Deutsche  Forschungs-  und  Versuchsanstalt 
flir  Luft-  und  Raumfahrt 
Flughafen 
3300  Braunschweig 
Federal  Republic  of  Germany 

1 .  Introduction 

Sufficiently  accurate  knowledge  of  the  wind  In  magnitude  and  direction  as  a  function  of  airspace 
position  and  time  is  an  essential  part  not  only  for  navigation  but  also  for  fuel  efficiency  and  efficient 
planning  and  control  of  air  traffic. 

The  matter  of  concern  in  this  paper,  for  instance,  is  the  demand  for  wind  data  in  four  dimensional 
guidance.  The  calculation  of  the  three  dimensional  flight  path  command  subject  to  time-of-arrival 
constraints  (fourth  dimension)  requires  wind  prediction  along  the  complete  flight  path  the  aircraft  is 
going  to  track.  Since  the  flight  path  is  to  be  calculated  and  updated  on  line  wind  information  has  to  be 
available  at  any  time  for  the  respective  three  dimensional  airspace. 

The  wind  data,  currently  available  through  MET  service  broadcast  are  not  sufficient  when  used  as 
single  source.  These  data  suffer  from  small  measurement  rates  with  respect  to  location  and  time.  An  actual 
wind  situation  can  extremely  deviate  from  what  the  MET  service  announces.  Therefore,  complementary  or  even 
quite  different  techniques  emerge  for  wind  estimation,  in  particular  using  modern  aircraft  sensor  and 
computer  equipment. 

The  Institute  of  FLIGHT  GUIDANCE  of  the  DFVLR  has  developed  such  airborne  wind  estimation  techniques. 
These  were  implemented  in  the  automatic  digital  flight  control  system  of  the  DFVLR ' s  test  aircraft  HFB  320 
and  were  flight  tested. 

In  order  to  demonstrate  the  efficiency  of  these  techniques,  automatic  4D  approaches  were  flown 
starting  at  a  Metering  Fix  about  50  nm  off  the  airport.  Among  other  criteria  the  time-of-arrival  errors 
were  examined  and  compared  against  the  allowance  of  +  5  seconds. 

2.  Wind  measurement 

There  are  several  methods  of  wind  measurement  or  anemometry  which  have  been  applied  and  are  still  in 
use,  like 

-  ground  measurement  on  buildings  or  towers  by  rotating  anemometers,  for  instance. 

-  radio  sounding  balloon, 

-  remote  measurement,  possibly  from  the  ground,  by  exploiting  the  Doppler  effect  created  by  returning 
scatter  of  signals  when  transmitted  in  frequencies  ranging  between  that  of  sound  waves  and  lasiv 
frequencies, 

-  airborne  measurement  of  the  vectors  for  true  airspeed  and  ground  speed  vectors  with  determination  of  th- 
difference. 

Obviously,  the  ground  measurement  does  not  work  if  wind  measurement  is  demanded  at  higher  altit.i''- 

as  it  Is  the  case  for  40-gu(dance, 
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The  MET  service  balloon  measurements  provide  good  information  at  the  time  of  measurement  and  in  the 
vicinity  of  the  position  where  the  measurement  is  taken.  However,  this  is  insufficient  with  regard  to  a 
larger  extent  of  airspace  and  time  period  to  be  covered. 

The  remote  measurement  methods  could  principally  cover  the  airspace  to  a  large  extent,  but  are  not 
operationally  available,  last  but  not  least  for  cost  reasons. 

The  airborne  measurement  of  ground  speed  and  true  airspeed  appears  to  be  the  remaining  most  suitable 
and  cost-effective  method  of  wind  measurement. 

The  basic  relationship  between  the  horizontal  wind  vector,  the  ground  speed  and  the  true  airspeed 
vector  is  usually  described  by  the  following  equations  (s.  fig.  1): 
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However,  these  equations  lead  to  large  deviations  from  the  correct  values  in  case  of  flight  conditions 
with  great  values  of  bank  angle  ♦and  angle  of  attack  a,  in  particular,  if  t'  is  set  equal  to  the  azimuth*. 

a 

By  use  of  equation  (41 

(4)  ^  =  *  -  a  -sin  *  , 

substantial  improvement  compared  to  plain  use  of  the  azimuth  ♦  can  be  made.  This  implies  sufficiently 
accurate  information  about  the  angle  of  attack,  though. 

Fig.  2  demonstrates  this  effect.  Graph  1  depicts  the  wind  speed  determined  by  f  *  ♦  for  a  certain 

3 

flight  section  containing  curved  flight  portions.  Graph  2  shows  the  corresponding  bank  angle  time  history. 
One  can  clearly  read  the  undesirable  correlation  between  bank  angle  and  wind  speed  looking  at  the  bant 
angle  peaks  and  wind  speed  offsets  during  turns.  These  errors  in  wind  measurement  can  amount  to  7  kts  in 
speed  and  to  about  15  degrees  in  direction.  Graph  3  shows  the  result  for  the  wind  speed  measurement  when 
the  correction  term  of  equation  (4!  is  used. 

3.  Wind  prediction  techniques 

The  problem  associated  to  wind  arises  with  regard  to  4D-guidance  because  of  the  need  for  predictive 
data  of  wind  speed  and  wind  direction  along  the  planned  flight  path.  How  can  the  wind  measurement  be  used 
in  the  process  of  predicting  the  wind  along  the  flight  path  ahead  of  the  current  airplane  position? 

As  treated  in  the  last  chapter,  there  are  wind  data  at  disposal  from  onboard  measurements  and 
meteorological  services.  With  a  data  link  available,  between  ground  facilities  and  aircraft  all  these 
existing  data  could  be  used  for  the  process  of  wind  prediction.  This  represents  the  most  ideal  case. 
Without  the  data  link,  other  prediction  methods  have  to  applied,  which  have  to  rely  predominantly  on 
either  onboard  measurements  or  ground  derived  d’**. 

These  techniques,  therefore,  can  be  subdivided  in 

-  Ground  facility  oriented  techniques 

-  Airborne  techniques. 
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In  the  course  of  flight  trials  for  a  4D-guidance  system  in  1983,  different  wind  prediction  techniques 
of  these  kinds  have  been  investigated  by  the  DFVLR  with  respect  to  their  applicability  to  40-guidance.  The 
flight  trials  were  performed  with  the  DFVLR  flight  test  aircraft  HFB  320  which  is  equipped  with  an 
automatic  digital  flight  control  system  including  a  higher  level  control  mode  for  40-guidance.  The 
measurements  required  are  provided  by  the  onboard  sensor  system,  essentially  consisting  of  a  digital  air 
data  computer,  an  INS,  rate  gyros  and  accelerometers  (fig.  3). 

3.1  Ground  facility  oriented  techniques 

In  case  of  existence  of  a  data  link,  all  data  of  interest  measured  onboard  aircraft  can  be  transmitted 
to  a  meteorological  computer  center  on  the  ground.  All  aircraft  capable  of  measuring  airspeed  and  ground 
speed  can  be  part  of  the  system.  For  those  aircraft  which  are  not  capable  of  measuring  ground  speed 
onboard,  radar  data  might  possibly  substitute  for  the  lacking  airborne  information.  The  ground  computer 
will  collect  all  these  data  and  will  generate  a  complete  three-dimensional  picture  of  the  local  wind  in  a 
distinct  piece  of  airspace.  This  technique  is  often  referred  to  as  "windmapping". 

The  advantage  of  this  method  lies  in  the  fact  that  the  majority  of  onboard  measurements  which  are 
available  accrue  along  busy  air  routes,  right  in  the  area  where  we  find  the  highest  demand  for  accurate 
wind  Information  with  regard  to  40-guidance. 

In  areas  with  abundance  of  wind  measurements  frequently  available  in  time,  only  mean  values  have  to  be 
determined,  possibly  by  Kalman  filtering.  In  areas  where  a  small  number  of  measurements  are  available 
within  a  limited  time  period,  inter-/extrapolation  techniques  can  be  used.  The  latter  will  be  described 
briefly  in  the  following  by  the  technique  of  using  the  cubic  spline  function  for  vertical  interpolation 
over  a  small  number  of  wind  measurements  rather  evenly  distributed  over  the  entire  altitude  range  of 
concern. 

Depending  on  the  number  of  measurements  1  ^n)ax  *  N+D.  vtolch  are  used  as  pivot  points  for  constructing 
the  curve  of  the  wind  profile,  the  considered  altitude  range  is  subdivided  in  Lmax  =  N  segments. 

The  spline  technique  enables  a  smooth  third  order  polynomial  transition  from  one 'Segment  of  the  wind 
profile  to  the  next. 

For  the  vertical  profile  of  wind  speed,  for  instance,  the  following  relationships  are  valid  for  the  N 
segments  in  case  of  the  cubic  spline  (s.  fig.  4): 
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The  evaluation  of  a  great  nuaiber  of  wind  profiles  proved  N  *  3  to  be  sufficient  for  the  altitude  range 
of  F130  through  FL100.  Surplus  measurements  are  used  for  enhancing  the  measurement  quality  of  the  selected 
altitude  pivot  levels. 

Ouring  the  flight  tests,  this  technique  was  simplified  in  a  certain  way  with  respect  to  the 
acquisition  of  wind  measurement  data,  as  being  utilized  as  pivot  values.  These  wind  data  were  measured 
during  the  climb  phase  the  aircraft  went  through  before  the  4D  approach  test  flight  was  started,  and  were 
stored  in  the  onboard  computer.  Table  1  shows  four  flight  test  results  of  time  control  achieved  when  this 
technique  was  applied. 

3.2  Airborne  techniques 

Two  prediction  techniques  of  airborne  type  were  investigated: 

1.  Wind  prediction  through  interpolation  on  the  basis  of  a  simplified  model. 

2.  Wind  prediction  through  extrapolation  on  the  basis  of  the  complete  wind  model  the  parameters  of  which 
are  estimated  by  a  Kalman  filter. 

3.2.1  Wind  modelling 

The  prediction  of  the  wind  along  the  flight  path  ahead  of  the  current  airplane  position  can  in 
principle,  work  by  inter/extrapolation  on  the  basis  of  a  sufficiently  valid  description  of  the  mean  wind 
as  a  function  of  the  airspace  location  relative  to  the  current  position  of  the  airplane,  the  so-called 
wind  model.  By  the  wind  model  existing  knowledge  about  the  physics  of  wind  can  be  exploited.  The 
operational  use  of  mean  wind  data  for  40-guidance  calculations  does  not  provide  significant  shortcomings. 
High  frequency  wind  variations  cannot  deteriorate  significantly  the  time  control  accuracy  which  is 
explicitly  required  at  the  end  point  of  the  40-fffgbt  phase. 

The  structure  of  the  wind  model  can  be  assumend  to  be  the  following: 

(o)  VWM  =  Vu  (hQ)  (h/ho)p  +  gSE  (x£  -  xEp)  +  g$N  (xN  -  xNp ) 

(7)  *WM  -VV  +  %  (XE  •  XEP>  +  9RN  (xN  -  XNP>  +  9RH  (h*ho) 

h  ±  ho 

Here  wind  speed  in  a  certain  altitude  is  given  by  known  wind  data  at  a  reference  altitude  ho 
multiplied  by  an  exponential  function  of  altitude.  The  additional  terms  in  eq.E  are  accounting  for  wind 
changes  within  the  same  altitude  by  gradients  g^E  and  g$N  as  a  function  of  the  distance  of  the  current 
airplane  position  (xEp,  xNp).  The  model  of  wind  direction  is  assumed  linear  in  all  three  dimensions  of  the 
geodetic  coordinate  system  with  the  gradients  gRE>  gRN  and  gRH> 

This  type  of  exponential  model  for  wind  speed  and  linear  model  for  wind  direction  as  a  function  of 
altitude  was  validated  by  a  large  number  of  wind  profiles  recorded  by  the  Hanover  Airport  MET  service  up 
to  3000  m  altitude  (FI  100).  The  statistics  of  these  recordings  are  shown  in  table  2. 

3.2.2  Filtering  for  wind  model  enhancement 

Wind  measurements  are  noisy,  partly  caused  by  measurement  errors.  Since  it  is  difficult  to  tell  apart 
measurement  errors  from  high  frequency  wind  changes,  only  mean  wind  data  as  a  function  of  airspace 
position  and  time  will  be  used  for  the  4D-guidance  calculations.  As  mentioned  before,  this  is  sufficient 
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to  comply  with  the  4D-guidance  time  control  requirements,  if  these  mean  data  can  be  made  available  and  if 
they  can  be  predicted  at  locations  ahead  of  the  current  airplane  position.  This  necessarily  leads  to 
filtering  of  the  measured  wind  data.  The  wind  model  serves  as  part  of  the  filtering  to  structure  the  mean 
wind  relationships.  The  parameters  of  this  model  are  the  crucial  quantities  to  be  determined  as  well  as 
the  errors  of  these  model  parameters.  The  best  suited  filter  for  this  purpose  is  the  Kalman  filter  which 
processes  the  difference  between  the  low  frequency  wind  model  output  and  the  high  frequency  wind 
measurement  signal  (fig.  5).  The  Kalman  filter  provides  an  estimate  of  the  errors  of  the  wind  model  the 
behavior  of  which  is  described  by  linear  error  equations,  the  so-called  error  model,  derived  by  partial 
differentiation  of  the  wind  model  equations.  This  error  model  is  part  of  the  Kalman  filter  forming  the 
“system  matrix"  J. 

The  error  state  vector  with  regard  to  wind  speed  has  got  5  components:  error  of  wind  speed,  error  of 
reference  wind  speed,  error  of  the  exponent  p  and  errors  of  horizontal  gradients  g$E  and  gSN-  The  error 
state  variables  with  regard  to  wind  direction  are  the  error  of  wind  direction  itself  and  the  error 
gradients  gRE>  gRN  and  gRR.  The  system  matrices  *5  and  *R  for  wind  speed  and  wind  direction  respectively 
are  the  following: 

(8)  f  1  *s(l,2)  »s(1,3) 

0  1  0 

0  0  1 

0  0  0 

0  0  0 

*5(1,2)  =  Ax  E  ( k ) 

*5(1 ,3)  =  AXN(k) 

*s(l,4)  =  p  •  Ih(k)/hQ]p  •  [ A h ( k )/h( k )] 

*5(1,5)  =  vw(ho).p.ln[h(k)/h0]  .  [h(k)/hQ]p  •  fAh(k)/h(k)] 

(9)  ri  *R(1 ,2) 

0  1 

*R  '  0  0 

0  0 

♦  p(l,2)  =  axE(k) 

♦  R( 1 ,3)  =  AxN(k) 

4  R( ■ >4)  =  Ah(k) 

In  order  to  estimate  the  wind  model  errors  with  sufficient  accuracy,  additional  Information  for  the 
filtering  is  needed  about  those  errors  which  are  not  described  by  the  error  equations.  These  unmodelled 
errors  are  accounted  for  by  the  system  noise  matrix.  Also  the  statistics  of  the  measurement  errors,  like 
IKS  and  air  data  sensor  errors,  have  to  be  taken  into  account. 

This  information  is  derived  from  data  like  those  In  table  2  and  known  statistical  error  models  of  the 
sensors.  The  measurement  noise  was  defined  by  a  discrete  function  of  the  bank  angle  in  order  to  take  into 
account  the  Increase  in  error  magnitude  during  turns. 

The  Kalman  filter  can  then  be  used  In  two  ways,  first  as  smoothing  filter  and  second  as  estimation 
filter  of  the  wind  model  parameters  with  regard  to  wind  prediction  along  the  4D-fl1ght  path  ahead.  Both 
applications,  in  particular  the  latter,  will  be  shown  in  the  following  rhaptrr. 


•p(1.3)  »R( 1 ,4) 

0  0 

1  0 

0  1 
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3.2.3  Wind  prediction  through  interpolation 


This  wind  prediction  technique  yields  the  vertical  wind  profile  assuming  no  wind  changes  without 
change  of  altitude.  This  is  in  conformity  with  the  wind  model  described  before  by  setting  the  horizontal 
wind  gradients  equal  to  zero.  Two  measurements  ahead  at  different  altitudes,  serve  as  input  data  to 
determine  the  unknown  wind  model  parameters.  For  this  purpose,  also  MET  service  data  can  be  utilized  in 
particular  for  the  extreme  (low)  altitude  at  which  the  aircraft  will  eventually  arrive  from  its  current 
position.  The  local  wind  measurement  is  taken  by  the  onboard  sensor  system. 

For  a  typcial  40  approach  the  altitude  changes  from  FL100  down  to  FL30  at  the  Merge  Gate,  the  point 
above  the  extended  runway  centerline  the  4D-flight  path  is  destined  for.  As  the  aircraft  is  approaching 
the  Merge  Gate  the  Interpolation  interval  decreases  and  the  wind  model  is  becoming  more  and  more 
realistic. 

Fig.  6  depicts  the  wind  profiles  derived  by  this  technique  at  four  different  stages  of  flight 
progress.  Accuracy  demands  are  prevailing  in  particular  after  the  point  where  the  last  corrective  change 
of  the  flight  path  is  possible,  not  far  from  the  Merge  Gate. 

Table  3  contains  the  4D-flight  test  results  for  the  time-of-arrival  error  as  a  result  of  this 
technique  of  wind  prediction. 

Fig.  7  shows  the  time  history  of  the  TOA  error  for  flight  number  14,  calculated  on-line  on  the  basis 
of  the  navigation  and  wind  measurement  data  available  at  that  time  instant.  The  poor  modelling  of  the 
actual  wind  profile  during  the  first  section  of  the  4D  approach  causes  the  increase  in  time  error  as  can 
be  seen  in  the  plot.  If  the  time  error  exceeds  the  error  limits,  as  shown  in  the  figure  (the  limits  are 
decreasing  with  time  from  +  20  sec  down  to  +  5  sec),  the  4D-guidance  mode  compulsorily  generates  a 
corrected  flight  path  in  order  to  compensate  for  the  time  error.  However,  during  the  last  section  of  the 
4D-approach  time  error  compensation  by  flight  path  modifications  is  no  longer  possible.  It  can  be  seen 
from  the  figure  that  right  at  this  crucial  flight  phase  the  wind  modelling  is  sufficiently  accurate.  This 
leads  to  the  conclusion,  that  the  feasibility  of  this  technique  depends  very  much  on  the  accuracy  of  the 
wind  data  at  the  Merge  Gate,  the  final  point  of  the  40-landing  approach  flight  path. 


3.2.4  Wind  prediction  through  extrapolation 

The  principle  of  this  technique  is  depicted  in  fig.  8.  The  wind  model  calculation  is  enhanced  by  a 
Kalman  filter  which  produces  an  estimate  of  the  wind  model  parameter  errors.  Besides  the  wind  model  output 
signals  and  actual  onboard  wind  measurements  information  about  the  noise  levels  of  the  wind  model 
calculation  and  the  onboard  wind  measurements  is  to  be  provided  for  the  Kalman  filtering. 

Fig.  9  presents  an  example  for  this  wind  prediction  technique.  It  shows  the  measured  values  as  well  as 
the  predicted  ones  for  wind  speed  and  wind  direction.  The  time  at  the  beginning  of  this  plot  is  the  actual 
point  of  time  of  the  flight  test.  The  prediction  from  this  time  on  is  illustrated  in  this  figure  (solid 
line)  to  demonstrate  the  prediction  performance.  These  predicted  values  are  to  be  compared  with  the 
corresponding  values  measured  lateron  (dots)  when  the  aircraft  follows  the  commanded  4D-flight  path  which 
was  calculated  on  the  basis  of  wind  prediction.  Obviously,  the  accuracy  of  prediction  declines  with 
increasing  prediction  time  but  the  errors  are  still  below  7  kts  and  10  degrees  for  wind  speed  and  wind 
direction  respectively  after  16  minutes  of  subsequent  flying  time.  The  particular  advantage  of  this 
technique,  of  course,  is  the  capability  of  self-dependent  onboard  wind  prediction. 

Because  this  technique  was  of  major  Interest,  a  total  of  B  flight  tests  were  conducted.  The 
time-of-arrival  errors  of  these  flights  are  listed  in  table  4.  Again,  the  results  comply  well  with  the 
requirements. 
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4.  Conclusion 

In  the  course  of  the  developawnt  of  an  automatic  four  dimensional  guidance  system  for  efficient 
control  of  operational  air  traffic  approaching  the  airport  a  function  for,  prediction  of  wind  speed  and 
wind  direction  along  the  calculated  flight  path  had  to  be  performed  with  sufficient  accuracy. 

Wind  prediction  techniques  were  Investigated  for  this  purpose.  It  was  made  use  of  the  wind 
measurements  available  on  the  ground  and/or  onboard  the  aircraft  as  well  as  of  a  model  describing  the 
local  wind  situation  around  the  actual  aircraft  position  where  actual  wind  Information  is  at  hand.  In 
particular,  the  wind  model  could  be  utilized  for  extrapolation  purposes  with  regard  to  prediction  and 
could  be  effectively  Implemented  In  conjunction  with  a  Kalman  filter  for  wind  model  error  estimation. 

All  techniques  described,  differing  In  their  technical  and  operational  features,  complied  with  the 
accuracy  requirements,  at  least  under  the  conditions  of  the  flight  test  experiments  conducted  at  the  DFVLR 
with  the  test  aircraft  HFB  320. 

5.  References 

|1|  Gelb,  A.;  Applied  Optimal  Estimation,  HIT  Press,  1974. 

1 2 1  Hemesath,  N.B.,  Bruckner,  M.H.,  Krlppner,  R.A.;  Three  and  Four  Dimensional  Area  Navigation  Study, 

FAA-Report,  FAA-RD-74-150,  June  1974. 

1 3 1  Pecsvaradl,  T.;  Four-Dimensional  Guidance  Algorithms  for  Aircraft  in  an  Air  Traffic  Control  En¬ 
vironment;  Ames  Research  Center,  NASA,  TN  0-7874,  Aug.  1975. 

1 4 1  Adam,  V.,  Lechner,  W.;  Investigations  on  Four-Dimensional  Guidance  in  the  THA,  AGARD  Conference 
Proceedings  No.  340,  Lisbon,  Sept.  82. 

1 5 1  Blslaux,  M.,  Cox,  M.E.,  Forrester,  D.A.,  Storey,  J.T.;  Possible  Improvements  In  Meteorology  for 
Aircraft  Navigation  EUROCONTROL,  Doc.  82.20.37,  Bruxelles,  Nov.  1982. 

|6|  Adam,  V.,  Lechner,  W.;  Guidance  and  Control  Research  Flight  Testing  with  HFB  320  Test  Aircraft; 
AGARDograph  No.  262,  Ground  and  Flight  Testing  for  Aircraft  Guidance  and  Control  Systems,  to  be 
published  1984. 


JafvJdMi  JN  '"'INUJAOU  XV  UiJIUJUti.t  IU 


rig.  7:  Time  history  of  a  tlme-of-arrlval  error 


1 -  «rror  equations  of  the  wind  model 

-  sensor  signals  V«.  VTA5,  41 

error  statistics 


Fig.  8:  Principle  oT  wind  prediction  through  extrapolation 
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Fig.  9:  Example  for  the  wind  prediction  through  extrapolation 
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Tab.  1:  TOA  errors  in  seconds  (cubic  spline  function) 


Bean  value 

standard  deviation 

wind  speed  error 

2.2  kta 

S.l  kta 

wind  direction  error 

M  deg 

16.0  deg 

exponent  p 

0.34S 

0.24 

vertical  gradient 

0.27  deg/FL 

0.7  deg/FI 

Tab.  2:  Statistical  analysis  of  wind  profiles 


flight  number 

4 

* 

11 

14 

TOA  error 

0.7 

4.0 

-1.4 

0.1 

Tab.  3:  TOA  errors  in  seconds  (wind  prediction 
through  interpolation) 


flight  number 

1 

2 

6 

7 

9 

- - - 

12 

16 

TOA  error 

4.4 

3.1 

-2.3 

2.9 

0.2 

l!^J 

1.0 

2.0 

Tab,  A:  TOA  error  in  seconds 

(wind  prediction  through  extrapolation) 
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A  METHOD  OF  ESTIMATING  AIRCRAFT  ATTITUDE 
FROM  FLY  BY  WIRE  FLIGHT  CONTROL  SYSTEM  DATA 


by 


Reginald  J.V.  Snell 
British  Aerospace  PLC 
Aircraft  Group,  Warton  Division 
Warton  Aerodrome,  PRESTON  PR4  1AX 
England 


SUMMARY 


The  trend  towards  the  use  of  Active  Control  Technology  (ACT)  to  control  the  aircraft  flight  path  has  led  to 
an  Increasing  investment  in  flight  path  sensors  and  associated  computing.  In  an  attempt  to  offset  the 
cost,  and  at  the  same  time  save  weight,  a  study  was  conducted  at  British  Aerospace,  Military  Aircraft 
Division  at  Warton  into  using  this  data  to  extract  aircraft  attitude.  If  this  could  be  achieved  it  would 
not  only  avoid  the  requirement  for  supplementary  hardware  in  the  form  of  an  Attitude  References  System  and 
Artificial  Horizon  etc.,  but  could  endow  the  source  of  attitude  with  the  high  Integrity  and  availability 
associated  with  flight  control  systems.  This  would  be  appreciated  by  pilots  who  were  pressing  for 
automatic  cross  referencing  of  flight  reference  data  to  minimise  cockpit  work  load  in  flight  situations 
where  the  pilot  needs  to  f ly *eyes  out' of  the  cockpit  as  much  as  possible. 

Following  initial  studies  with  flight  recorded  data,  an  experimental  application  was  flown  on  the  ACT 
'Fly-by-Wire'  Jaguar  Demonstration  aircraft  using  digital  data  originating  in  the  Flight  Control  System. 

The  flight  results  have  demonstrated  good  accuracy  and  stability  in  the  general  course  of  flying.  During 
violent  manoeuvres, errors  in  pitch  peak  at  2°  to  3°  but  are  generally  insignificant  by  completion  of  the 
manoeuvre. 

If  attitude  can  be  established  with  sufficient  accuracy,  it  would  be  feasible  to  extract  aircraft  magnetic 
heading  from  a  three  axis  magnetometer.  Heading,  together  with  attitude  and  air  data  information  would 
provide  the  basis  for  a  dead  reckoning  navigation  system.  It  is  believed  that  such  a  basic  system  could  be 
aided  by  a  continuous  terrain  profile  matching  system  to  provide  high  accuracy  navigation.  Consequently, 
the  method  not  only  offers  a  source  of  high  integrity  attitude  but  could  also  serve  as  the  basis  for  a  low 
cost,  highly  accurate  navigation  system  suitable  for  operation  over  digitally  mapped  terrain,  either  as  a 
stand  alone  system  or  a  back  up  for  cross  monitoring  an  inertial  navigation  system  etc. 

BACKGROUND 


The  motivation  for  the  development  of  a  technique  to  extract  attitude  from  the  Flight  Control  System  arose 
out  of  a  study  for  a  low  cost,  lightweight  combat  aircraft.  To  Increase  tolerance  to  higher  normal 
acceleration  levels  in  combat,  the  pilot's  seat  was  to  be  more  reclined  than  conventionally  which  had  the 
effect  of  reducing  the  visual  area  available  for  cockpit  Instrument  display.  Because  of  the  limited 
display  space,  there  was  pressure  to  reduce  the  number  of  secondary  instruments  used  by 'the  pilot  for  cross 

checking.  This  was  in  line  with  a  demand  from  pilots  for  automatic  cross  referencing,  to  red  ice  pilot  work 
load  in  flight  situations  where  they  need  to  fly  eyes  out  of  the  cockpit.-  The  standby  displays  are  chosen 
for  their  high  availability  derived  from  design  simplicity  and  maturity.  Consequently  any  single  source  of 
data  must  have  both  Integrity  (to  avoid  cross  monitoring)  and  high  availability  (to  replace  standby 
instruments) . 

The  aircraft  was  to  have  a  digital  flight  control  system  with  multiple  lanes  of  sensors  to  establish  both 
high  integrity  and  availability.  Therefore  any  function  which  used  flight  control  system  data  might  be 
endowed  with  integrity  and  availability.  As  the  flight  control  system  uses  g>roscopes  and  attitude  system-; 
also  use  gyroscopes,  could  attitude  be  a  suitable  subject  for  investigation? 

DERIVATION  OF  ATTITUDE 

The  traditional  attitude  reference  system  in  its  most  basic  form  comprises  a  gyros t.ibi 1 i sed  reference  axi  • 
aligned  to  the  vertical  and  corrected  for  drift  by  using  accelerometers  acting  In  the  sense  of  a  plumb  bob. 
The  <u  celenmet  crs  of  course  cannot  distinguish  between  gravitational  and  inertial  acceleration  and 
consequently  their  vertical  reference  is  only  dependable  over  periods  of  time  of  sufficient  duration 
wherein  the  influence  of  manoeuvre  acceleration  is  small  in  relation  to  the  sustained  gravl tat iona 1 
Acceleration.  Accordingly,  the  coupling  between  the  accelerometers'  and  gyroscopes'  vertical  references 
must  be  comparatively  weak  to  avoid  significant  attitude  errors  during  periods  of  severe  aircraft 
manoeuvres.  For  this  reason, the  random  drift  rate  of  the  attitude  reference  gyroscopes  is  traditionally 
not  greater  than  several  degrees  per  hour. 

The  gyroscopes  In  current  ACT  systems  have  random  dr  lit  rates  in  the  order  of  several  degrees  per  minute  >«i 
nearly  two  orders  greater  than  the  requirement  for  traditional  attitude  leforenre.  Consequently,  in  order 
to  employ  ACT  gyroscopes  lor  the  derivation  of  attitude,  there  must  he  a  (loser  coupling  with  the  long 
vert  leal  reference  mu-pan I  tat Ing  a  better  vertical  reference  than  from  the  .u  ce 1 eromet ers  alone. 

As  the  act e leiomoters  cannot  distinguish  between  gi av ltat Iona  1  and  inettlal  accelerations,  then  the 
vertical  reference  could  be  Improved  by  correcting  the  accelerometer  mcaaui enient s  for  Inertial 
acce 1 erat ion. 

The  inertial  acceleration  acting  on  the  airframe  lw  nf  course  produced  hy  change  of  magnitude  .mil  illicit  i.< 
of  aircraft  velocity.  This  acce  1  et  at  loll  can  he  expteiiHcd  In  teiam  of  Its  < -ompunent  m  siting  .il>ng  the 
air  •(  alt  reloieme  /men. 
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Figure  1  shows  the  traditional  right  handed  set  of  axes  x,  y  and  z, centred  on  the  aircraft  centre  of 
gravity, with  x  lying  along  the  aircraft  fuselage.  The  components  of  aircraft  velocity  V  along  these  axes 
are  respectively  V  ,  V  and  V  and  the  rotation  rates  about  the  axes  respectively  P,  Q  and  R.  The  inertial 
acceleration  alongXan  Xxis  isZthen  the  sum  of  an  acceleration  caused  by  change  of  magnitude  of  velocity 
along  the  axis  and  two  centripetal  components  induced  by  velocities  and  rotations  about  the  two  adjacent 
axes  as  shown  in  Figure  2  for  the  x  axis.  The  inertial  accelerations  for  the  three  axes  can  then  be 
expressed  as  *•  .  V+VO-VR 

1  y  »  '  v 


V  +  V  R  -  VP 

y  x  z 

V  +  V  P  -  V  Q 

z  y  x 


Looking  to  the  Plight  Control  System  (PCS)  for  sources  of  data  to  evaluate  these  expressions,  then  clearly 
the  rotational  terms  P,  Q  and  R  would  be  available  from  the  PCS  gyroscopes.  Other  sensor  data  used  by  the 
PCS  include  the  air  data  measurements,  pitot  static  pressures,  and  angles  of  attack  and  side  slip  ,3 
In  conjunction  with  outside  air  temperature  measurements,  True  Air  Speed  can  be  evaluated  from  the  pressure 
measurements  to  represent  aircraft  speed  V  and  the  co^>onenta  of  this  velocity  along  each  axis  deduced  from 
the  c*  and  /3  measurements.  As  pitot  probes  generally  have  a  high  pressure  recovery  over  a  wide  angle  of 
attack,  then  it  may  be  taken  that  True  Air  Speed  represents  the  velocity  V  of  the  aircraft  in  the  air  mass. 
Referring  to  Figure  3,  the  resolution  of  V  onto  the  x  axis  will  then  correspond  to  the  direction  cosine 

l  *  (1  +  tan2<*  +  tan2^  )  ** 


so  that  V  •  V  i 

x 


Vy  -  V  i  tan 

V  -  VI  tan  oc 


*,=  -v»n 


*7=V'Q 


Figure  2  Acceleration*  along  the  X  Axis 


figure  1  Uenntutlnn  of  True  Air  Sjwerl  onto  X  Y  /  A«i*n 
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This  method  of  estimating  inertial  acceleration  is  based  upon  the  use  v.f  air  speed  and  the  implicat ; :<nt 
require  examination.  Now,  fundamentally  there  is  no  measure  ci  absolute  velocity.  All  velocities  must  to 
relative  to  some  arbitrary  reference  frame,  the  most  convenient  usually  being  the  Earth's  surface.  ?r 
formulating  accelerations ,  due  account  must  be  made  for  any  acre le rat  Km  of  the  reference  fiame  itself. 

For  instance,  rotation  of  the  Earth  will  induce  Coriolis  terms  which  must  be  allowed  for  in  Inertial 
Navigation  systems. 

Therefore  in  using  the  air  mess  as  a  lrame  of  reference,  the  wind  speed  is  not  directly  of  concert:  but 
change  of  wind  speed  is  pertinent.  Ir  general,  significant  air  mass  acceleration  appears  as  gusts  of 
comparatively  short  duration  and  the  resulting  errors  may  be  amenable  tu  smoothing. 

The  next  question  is,  what  is  the  potential  accuracy  ol  such  a  system?  In  general,  attitude  accuracy  is 
more  important  in  sustained  steady  manoeuvres,  level  flight,  descents  and  turns  to  avert  excessive 
deviation  of  the  flight  path.  As  rapid  manoeuvres  are  relatively  short  term  then  larger  errors  may  be 
tolerated  provided  there  i3  no  residual  error  at  the  end  of  the  manoeuvre.  Consider  the  steady  state  case 
where  in  principle  there  would  be  no  differentiation  of  the  components  of  air  speed  along  each  axis.  The 
accuracy  would  depend  upon  the  errors  in  accelerometer  and  gyroscope  measurements. 

The  ACT  Jaguar  Digital  Flight  Control  System  uses  12  bit  digitisation  of  sensor  data  and  it  is  assumed  that 
projected  systems  will  also  use  at  least  12  bits  if  not  extended  to  U  bits.  If  the  accelerometers  on  the 

longitudal  and  transverse  axes  have  a  range  of  ±2g  then  the  least  significant  bit  (LSB)  with  12  bit 

digitisation,  would  be  O.OOlg,  amounting  to  an  attitude  error  of  0.06  degrees. 

The  corresponding  errors  attributable  to  the  gyroscopes  will  arise  from  centripetal  accelerations  induced 
by  velocities  along  adjacent  axes. 

Assuming  negligible  sideslip  in  the  steady  state  case,  the  centripetal  acceleration  error  along  the 
longitudinal  or  x  axis  would  be  due  to  velocity  along  the  normal  or  z  axis  and  pitch  rotation  error. 

Typical  pitch  gyroscope  range  would  be  i60°/sec.  or  a  I, SB  or  0.03°/sec.  for  12  hit  digitisation.  At  Mach 
0.9  or  300  metres/sec.  and,  say,  an  angle  of  attack  of  2  degrees,  the  velocity  along  the  z  axis  would  be 
10.5  m/s  and  the  acceleration  induced  along  the  x  axis  would  be  0.0055  m/sec.2,  amounting  to  a  pitch  error 
of  0.03  degrees. 

The  centripetal  acceleration  error  along  the  transverse  or  y  axis  will  be  due  to  velocity  along  the  >:  axis 

and  yaw  rotation  error.  Again,  the  yaw  gyroscope  operating  range  will  be  about  i60°/sec.  and  LSB 

0.03*/sec.  Therefore  at  Mach  0.9  with  a  velocity  along  the  x  axis  of  300  m/s,  the  acceleration  error  will 
be  0.157  m/sec.2  amounting  to  a  bank  error  of  0.92  degrees. 

Therefore  the  intrinsic  pitch  error  due  to  digitisation  will  be  of  the  order  of  0.1  degree  and  the  bank 
error  1  degree.  Pitch  is  always  the  more  critical  channel  and  larger  errors  are  acceptable  in  bank. 

There  is  a  further  acceleration  term  to  consider,  induced  by  travelling  over  the  curved  surface  of  the 
Earth.  This  is  the  Coriolis  term  acting  at  right  angle  to  the  direction  of  travel,  expressed  as: 

-  ?.V D  sin  X  “V2  tan  X  .  sin  y 
R 

where  V  is  ground  speed,  y/  is  track  angle,  O  Earth's  rotation  rate,  K  Earth's  radius  and  X  latitude 
angle.  The  term  can  be  computed  from  navigation  data,  bur  if  not  allowed  for,  it  would  generate  errors  in 
bank  of  the  order  of  0.2e  to  0.3°  at  Mach  0.9  at  Northern  European  latitudes. 

Therefore,  having  realised  that  the  magnitude  of  wjndspeed  was  not  n  -ritical  factor  and  that  the  system 
had  the  potential  for  adequate  intrinsic  accuracy,  the  concept  was  tested  using  flight  recorded  data.  Such 
data  was  already  available  from  pre-production  Tornado  aircraft,  instrumented  for  flight  handling 
chaiance.  The  instrumentation  Included  a  side  slip  and  three  axes  of  accelerometers  not  normally  fitted 
to  production  aircraft.  Further,  the  records  of  angle:,  of  attack  and  side  slip  and  the  accelerometer 
reading  were  corrected  to  the  aircraft's  centre  of  gravity  location.  The  instrumentation  records  also 
included  pitch  and  bank  measured  by  the  aircraft's  inertia1  navigation  system,  providing  a  convenient  d.»t"r. 
for  assessing  the  accuracy  of  the  technique.  The  data  1*.  ^corded  digitally  bur  only  to  10  bits,  which 
vtcld  coarsen  the  attitude  estimates  in  relation  to  their  pr-tenti.il  use  with  a  flight  control  system. 

Initial  explorations  with  this  data  ve re  aimed  at  calculating  nttitmh 
gravitational  acceleration  on  each  axis  x  ,  y  and  z  calculated  froi 
total  acceleration  and  estimated  inertial®acc£lerat i§n  on  Mcb  axis. 

pitch  angle  0  ■  arc  sin  \  V.  ) 

(  K*  > 

hank  angle  0  •  arc  tan  (  y  .) 

(  :'K  ) 

P, 

Win  re  g|  is  the*  local  gravitation  acceleration  taken  as 

K .  *  -  /  x  2  ♦  v  2  * 

1  R  K 

to  avoid  numerical  problems  when  x^/g^  approaches  unity. 

'I  bis  proved  to  h«  «  > «  ti.H  I  ve  I  y  noisy  due,  as  one  might  expi  •  t  ,  I-  ••  I  I  I  ••  i  ei»f  I  at  I  on  <-i  t  lie  »  •  *nipi  •nenf  it 
a*i  speed  on  ea<  h  axis  a  large  putt  of  f  he  noise  being  dm  *■>  «l  I  ►.  i  *  .•  I  quant  i « •  -  ■ . 


i  directly  from  the  components  of 
•;  rhe  difference  between  the  treasured 
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Several  types  of  filter  were  investigated  to  reduce  the  noise  induced  by  dif t'erentiacion.  The  most 
suitable  was  found  to  be  a  recursive  differentiator  and  filter  of  the  type: 


-  A  (Xj  - 


i-l 


)  -  Bi 
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where 


A  -  1  +  B  +  C 

41 


The  values  of  B  and  C  were  selected,  in  relation  to  the  sampling  interval  4T  to  give  a  cut  off  a  little 
over  1  Hz,  this  being  the  order  of  pitch  response  frequency  of  typical  fighter  aircraft.  The  filter 
produces  a  substantially  linear  phase  lag  with  frequency  up  to  about  i  Hz  so  that  all  frequencies  less  than 

1  Hz  have  a  similar  time  lag. 

To  synchronise  the  rotational  acceleration  terms,  they  were  deliberately  delayed  by  the  amount  of  the 
filter  time  delay  before  being  added  to  the  linear  acceleration  terns  p reduced  by  differentiation.  The 
resulting  attitude  estimates  were  now  stale,  and  were  brought  up  to  current  time  by  adding  an  incremental 
change  of  attitude  deduced  by  integrating  gyro  body  rate  measurements  over  the  filter  time  delay  interval. 

The  resulting  prediction  of  attitude  agreed  quite  well  long  term  with  the  inertia]  navigation  reference  but 
was  still  far  too  noisy  to  be  used  alone. 

The  other  source  of  attitude  is  that  produced  by  integration  of  the  gyroscope  body  rates.  This  estimate  is 
smooth  but  prone  to  long  term  drift.  The  magnitude  of  the  drift  was  difficult  to  assess.  Comparing  this 
source  of  attitude  with  the  inertial  reference, indicated  a  divergency  of  the  order  of  the  LSB  in  the  10  bit 
instrumentation  records,  implying  that  the  intrinsic  drift  of  the  gyroscopes  was  much  less. 

The  situation  was  obviously  a  suitable  candidate  lot  a  Kalman  Filter  wherein  the  long  term  stability  of  the 
noisy  attitude  estimates  can  be  combined  with  the  smooth  but  drifting  estimates  derived  from  integration  of 
gyro  body  rates.  A  continuous-discrete  extended  Kalman  Filter  with  pitch  and  roll  as  the  state  variables 
was  duly  implemented.  The  attitude  estimates  now  proved  to  be  sufficiently  smooth  and  accurate  to  warrant 
further  work  on  the  concept,  culminating  in  a  flight  demonstration.  Because  the  method  was  based  upon 
building  up  the  gravitational  acceleration  components  from  the  components  of  inertial  acceleration,  it 
became  termed  the  Synthetic  Attitude  Technique. 

FLIGHT  DEMONSTRATION 


The  obvious  vehicle  for  a  flight  demonstration  was  the  ACT  Jaguar  demonstration  aircraft  flying  at  k'arton 
with  a  digital  flight  control  system.  The  sensor  data  available  within  the  FCS  included  pitot-static 
pressures,  angles  of  attack  and  side  slip  together  with  all  three  axes  of  gyroscope  measurement  of  aircraft 
body  rotation  rates.  The  only  data  lacking  was  the  acceleration  measurements  along  the  aircraft  axes.  A 
further  important  consideration  was  that  the  aircraft  FCS  ground  rig  was  sited  at  War ton  and  could  be  used 
to  develop  and  clear  the  technique  before  embarking  upon  flight  trials. 

The  most  appropriate  place  to  Invest  the  software  for  computing  attitude  would  be  in  the  FCS  computers  to 
thereby  acquire  integrity  and  availability.  To  pursue  this  policy  on  the  demonstration  aircraft  would 
cause  Inevitable  delays  to  the  main  flight  trials  programme  and  was  therefore  untenable.  Similarly  any 
attempt  to  display  or  involve  this  source  of  attitude  with  other  avionic  subsystems  was  discarded  to  avoid 
delays  and  the  expense  incurred  in  clearing  flight  safety  implications.  The  outcome  was  that  a  dedicated 
processor  would  be  required  which  simply  fed  data  into  the  Flight  Data  Recording  System.  Access  to  data 
would  be  a  straightforward  matter  of  tapping  into  the  25  Hz  digital  data  stream  from  the  FCS  computers  to 
the  Flight  Data  Recording  System. 

A  processor  was  constructed  by  the  Electronics  Department  at  Wat  ton,  and  designed  to  receive  J6  bit  data 
from  the  FCS  computers,  convert  analogue  data  from  the  accelerometers  and  a  total  temperature  probe  to  12 
bits,  perform  computations  in  16  bits  and  output  data  in  analogue  form  for  flight  recording.  In  addition 
to  the  fundamental  attitude  computation,  the  processor  had  to  derive  true  air  speed  from  the  pitot  static 
and  total  temperature  measurement  and  correct  accelerometer  measurements  to  the  aircraft  centre  of  gravity 
position.  Limitations  in  computing  capacity  prevented  inclusion  of  corrections  for  compressibility  effects 
on  the  pitot  static  measurements  in  the  transonic  region.  The  offset  of  the  accelerometers  from  the 
aircraft  centre  of  gravity  (CG)  were  based  on  a  mean  CG  position  in  flight. 

Acceleration  measurements  were  provided  by  a  set  of  three  Syslron  Donne r  accelerometers  type  4311  with  a 
performance  compliant  with  12  bit  digitisation.  The  range  on  the  x  and  y  axes  was  *2g  and  -2g  to  10g  on 
the  z  axis.  The  accelerometers  were  mounted  on  a  common  bracket  to  maintain  orthogonal! ty  and  mounted 
about  one  metre  from  the  aircraft's  centre  of  gravity,  which  was  as  close  as  tin-  installation  would  allow. 
The  mounting  site  was  in  the  spine  which  facilitated  alignment  of  r he  axes  ol  these  accelerometers  to  c f e 
aircraft  axes. 

FLIGHT  RESULTS 

In  assessing  the  performance  of  the  technique,  the  essential  feature  should  he  nt»  ill  error  in  sustained 
flight  conditions  to  avoid  pronounced  deviation  of  the  flight  path  from  the  intended  direction.  Small 
error  excursions  could  be  tolerated  provided  they  were  of  short  duration.  Larger  errors  can  he  tolerated 
In  highly  dynamic  manoeuvres  because  ot  their  shorter  duration  provided  there  won  n  return  to  normal 
Condi* ions  within  a  very  short  time  of  completing  the  manoeuvre. 

The  degree  of  suceess  of  l  lie  technique  with  n  ?  pn  t  to  these  criteria  may  he  g.ioged  li*m  the  spei  ifnen  time 
histoiies  shown  In  Figures  <«  to  li.  These  h  1  *»f  «»t  let.  show  the  dllfereint*  between  svnilirtle  attitude 
estimated  in  flight  and  the  corresponding  Inertial  I'latfottn  attitude,  suht  rnrte.'  j  ■’  ’light  Mom  10  hit 

dlg'tal  Might  record* .  The  flight  nmi"i  with  low  dyruunlr  Might  .  1  •!  pn-grrefe  f  hr  .m;1. 

pit  ell  manoeiiv  ten,  h  1  gli  g  I  ii  i  nn  mid  i  up  I  d  i  »•  I  1  «•  t  >  i  <-|>  i  <-ueM  I  t»«  <  e/t s  I  ng  I  v  im >  i  •  •  •  \  •  u  *m  I «  <  .  i..l  l  t  l  out.  . 
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In  ths  low  dynamic  conditions,  a  20  banked  turn  and  a  landing  approach  descent  Figures  4  and  5,  the  mean 
pitch  error  Is  zero.  Peak  pitch  error  excursions  are  only  V  in  the  turn  and  there  la  one  instance  of  a 
peak  of  1.2*  in  the  descent.  The  bank  error  in  the  turn  shows  a  bias  of  about  -2*  with  a  peak  error  of 
-4*.  In  the  descent  the  mean  bank  error  is  zero  but  the  p«.k  error  is  3*  where  2*  is  exceeded  for  about 
one  second. 

Figures  6  and  7  show  some  pitch  manoeuvres  with  wings  level  pulling  some  2  and  2.6g.  In  both  cases  the 
pitch  error  is  contained  within  1°.  In  Figure  6  the  bank  errors  also  lie  within  1*  but  in  Figure  7  the 
errors  peak  at  ±6°  at  the  point  where  the  pitch  rate  is  greatest. 

Two  level  turns  at  3g  and  6g  respectively  are  shown  in  Pigures  8  and  9.  In  both  cases  the  pitch  errors  are 
within  *1.5*.  The  bank  errors  peak  at  +6*  and  -8*  in  the  3g  turn  and  +3*  and  -4°  in  the  6g  turn  at  maximum 
bank  rate.  In  the  sustained  part  of  the  6g  turn  the  bank  error  is  generally  less  than  3s. 
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Figure  4  2g  Turn 


Figure  5  Landing  Approach 
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Figure  6  Straight  2g  Puil 


Figure  7  Rapid  Pitch  Manoeuvres 
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The  final  two  manoeuvres  are  with  high  roll  rates ,  a  2g  Wind-up  Turn  (WUT)  and  some  rapid  rolls.  Figures  10 
and  11.  The  pitch  error  in  the  WUT  is  substantially  zero  with  a  peak  error  of  0.8*.  However,  although  the 
average  bank  error  approaches  zero,  there  is  a  very  large  error  of  20*  at  the  maximum  roll  rate.  The  rapid 
rolls  exhibit  similar  characteristics.  The  pitch  errors  are  within  ±1.5*  but  the  bank  errors  attain  25*, 
again  at  the  maximum  rate  of  change  of  bank  angle. 


Figure  10  2g  Wind-Up  Turn  Figure  11  Rapid  Rolling 


To  aum  up  then,  the  mean  pitch  error  la  zaro  especially  In  gentla  manoeuvres  with  some  maximum  errors 
generally  not  exceed  1  to  degrees.  The  bank  errors  are  larger,  but  still  small  in  gentle  auinoeuvres. 
In  high  dynamic  manoeuvres,  the  bank  errors  are  pronounced  at  maximum  pitch  and  bank  rates  but  return  to 
negligible  generally  before  completion  of  the  manoeuvre. 

Thus  at  the  present  state  of  development,  the  flight  results  may  be  claimed  to  be  most  encouraging.  The 
latest  analysis  of  flight  data  has  shown  that  the  large  bank  errors  could  be  reduced  by  changing  the 
coefficients  in  the  velocity  dif ferentlator  routine  and  the  associated  time  delay  corrections. 

It  is  also  believed  that  some  furthar  reduction  in  error  could  be  achieved  by  placing  more  weighing  on  the 
gyroscope  attitude  reference  within  the  Kalman  Filter.  However  the  random  drift  rate  of  the  gyroscopes , 
especially  as  they  are  a  consolidated  mean  of  four  gyroscopes  on  each  axis,  is  much  less  than  the  least 

significant  bit  of  the  flight  recorded  data  and  therefore  this  line  of  investigation  is  impractical  with 
the  current  standard  of  flight  recording. 

MAGNETIC  HEADING 


Although  the  Synthetic  Attitude  Technique  is  primarily  concerned  with  attitude,  it  can  be  made  to  fulfil  a 
greater  role  in  conjunction  with  other  technical  developments. 

One  such  development  Is  the  three  axis  magnetometer  or  three  axis  flux  detector  (3AFT)).  If  the  attitude  of 
each  sensing  axis  of  the  3AFD  is  known,  the  horizontal  component  of  the  Earth1 s  magnetic  field,  that  is 
magnetic  north,  can  be  resolved  out  of  the  magnetometer  readings  to  give  aircraft  magnetic  heading.  As 
with  the  Synthetic  Attitude  Technique,  the  FCS  gyroscopes  can  be  used  to  smooth  out  noise.  Heading 
rotation  rate  can  be  resolved  from  the  FCS  gyroscopes  and  Kalman  Filtered  with  basic  magnetic  heading  from 
the  magnetometer. 

The  attraction  of  the  technique  is  that  it  is  not  prone  to  errors  in  turns  ns  Is  the  earlier  pendulously 
mounted  two  axis  magnetometer  as  it  swings  out  of  the  horizontal  plane  into  the  bank  plane. 


Exploratory  flight  trials  are  being  undertaken  on  a  three  axis  magnetometer,  also  on  the  ACT  demonstrator 
Jaguar.  An  experimental  3AFD  constructed  by  BAe  Dynamics  Group,  Bracknell  Division,  is  mounted  near  the 
top  of  the  fin  in  place  of  the  forward  passive  radar  warning  detector  head  with  its  three  sensing  axes 
aligned  to  the  aircraft  axes.  Initial  calibration  of  the  device  has  been  nude  with  reference  to  Inertial 
Navigator  heading  and  attitude  to  resolve  published  Earth's  magnetic  field  data  onto  each  axis  of  the 
magnetometer  for  comparison  with  measured  field  strength. 


The  true  component  of  the  Earth's  field  on  each  axis  can  be  expressed  in  terms  of  the  *otal  measurements 
x  ,  y  and  z  to  account  for  axis  misalignment,  hard  Iron  slngla  cycle  and  soft  Iron  two  cycle  effects.  In 

tHe  firm:  * 

H  ■  a,  x  +  b.  y  +  c,  z  +  d, 
x  1  m  1  7m  1  ■  l 


"y  ’  *2  x«  +  b2  ym  *  C2  %  +  d2 

Hz  ’  *3  *•  +  b3  \  ♦  c3  +  d3 


The  corrected  measurements  H  ,  H  and  H  are  then  resolved  onto  the  horizontal  plane,  along  and  across 
aircraft  heading,  using  pltclf  an8  bank  Attitude  «s  follows. 


H.  ■  H  cos  9  +  sin  8  (H  sin  0  ♦  H  cos  0] 

A  z  y  z 

H  •  II  t  oh  0  -  H  ntn  0 
x  y  r 
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The  horizontal  component  of  the  Earth's  magnetic  field  is  therefore: 


and  aircraft  magnetic  heading  becomes 

-  arc  cos, H  \  or  arc  sin,-H  \ 

H  '  H*'  v ~"jjx 

The  traditional  ground  compass  swing  will  exercise  the  x  and  y  axes  of  the  magnetometer  from  the  positive 
to  the  negative  magnitude  of  the  Earth's  horizontal  magnetic  field  whilst  the  magnetic  field  on  the  z  axis 
remains  substantially  unchanged.  Consequently  the  device  can  be  calibrated  fully  only  in  fight  in 
manoeuvres  including  steep  banks  and  inverted  fight.  At  the  time  of  writing  only  part  of  the  flight 
envelope  has  been  analysed.  However,  the  limited  data  gathered  so  far  can  serve  to  illustrate  the 
potential  of  the  device. 

Figure  12  shows  a  post  flight  estimate  of  magnetic  heading  in  relation  to  true  heading  based  on  flight 
records  from  the  magnetometer  and  inertial  navigation  system  heading  and  attitude.  The  first  manoeuvre  is 
a  60/65"  bank  turn  through  360°  of  heading  followed  by  a  barrel  roll  and  a  slow  roll.  The  turn  illustrates 
how,  throughout  the  full  360°  heading  change,  magnetic  heading  maintains  within  *2°  or  so  of  a  constant 
difference  with  true  heading  amounting  to  the  local  magnetic  deviation.  In  the  course  of  the  two  rolls 
there  is  a  deviation  from  mean  magnetic  heading  of  about  4*  or  so  corresponding  to  rudder  application  to 
counter  side  slip  as  the  aircraft  rolls  through  90°  of  bank.  The  rudder  application  causes  the  fin  to  bend 
and  twist  thereby  slightly  misaligning  the  magnetometer  axes  to  give  rise  to  the  error.  The  effect  Is 
pronounced  because  the  high  angle  of  dip  results  in  a  heading  error  of  some  2.5  times  the  attitude  error. 


Figure  12  3  Axis  Magnetometer  Heading 


The  next  stage  of  development  would  be  to  Kalman  filter  the  basic  magnetometer  heading  with  the  rate  of 
change  of  heading  resolved  through  attitude  from  the  FCS  gyrocopes.  As  the  gyroscopes  are  near  the  centre 
of  the  aircraft,  they  will  be  unaffected  by  deflections  of  the  fin  and  therefore  the  filtered  value  should 
show  a  marked  attenuation  of  the  errors  seen  in  the  roll. 

NAVIGATION 


The  heading  provided  by  the  3  axis  magnetometer,  together  with  the  projection  of  True  Air  Speed  onto  the 
horizontal  plane  provide  the  basic  elements  for  an  Air  Data,  dead  reckoning  navigation  system.  Such  typo 
of  navigation  is  susceptible  to  errors  induced  by  changes  in  wind  speed  and  direction  and  is  therefore  only 
used  in  emergency  situations  when  all  else  has  failed.  However,  over  short  periods  of  time  the 
accumulation  of  navigation  error  may  be  sufficiently  small  to  enable  further  exploitation  in  association 
with  other  techniques.  One  such  technique  is  terrain  profile  matching  which  estimates  position  by 
correlating  measured  height  of  the  terrain  profile  with  stored  height  of  the  terrain  being  overflown.  The 
technique  works  in  conjunction  with  a  dead  reckoning  navigation  system  which  is  needed  to  provide  initial 
estimates  of  direction  and  horizontal  displacement  for  each  correlation  step.  Current  studies  are 
associated  with  Inertial  Navigation  but  preliminary  investigations  by  BAe  Dynamics,  Rristol  Division  bail’d 
on  flight  data  suggest  that  their  TKKPROM  continuous  terrain  profile  matching  technique  may  he  workable 
with  Air  Data  navigation  providing  heading  errors  are  within  a  degree  or  so.  The  comparat ively  high  update 
of  cont inti ou h  profile  matching  enables  the  system  to  cope  with  changes  in  wind  conditions.  The  position 
accuracy  will  be  less  than  TF.RPROM  aided  IN  but  is  expected  to  be  better  than  an  TN  alone.  A  iurther 
advantage  of  this  technique  is  that  if  can  also  provide  accurate  horizontal  and  vertical  terrestial 
veloc I  tics. 

The  attraction  of  continuous  terrain  piofllr  matching  In  its  autonomy  with  a  high  «onfidence  af lorded  by 
virtually  continuous,  automatic  position  fixing  unimpaired  by  weather  conditions.  To  this  can  be  added  t h>* 
advantage  of  lining  the  associated  height  data  bam*  to  estimate  the  height  ol  giound  ahead  of  the  ainialt, 
without  the  emlMRlon  of  forward  energy,  again  regardless  of  weather  conditions,  t-  provide  the  basic  tango 
data  I  «*  i  a  parialv*  t*i»aln  following  Mvafem. 
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Terrain  profile  matching  of  course  is  limited  to  flight  over  land  for  which  there  is  a  digital  height  data 
base.  An  alternative  high  accuracy  navigation  system  is  NAVSTAR  which,  being  radio  based,  lacks  the 
autonomy  of  terrain  profile  matching  but  at  least  it  is  Global  In  Its  application.  This  system  essentially 
provides  measurement  of  aircraft  terrestial  position  and  velocity,  but  cannot  provide  heading  or  attitude 
data.  Consequently,  a  cost  effective  solution  could  be  to  provide  attitude  and  heading  by  the  Synthetic 
Attitude  Technique  in  conjunction  with  the  three  axis  magnetometer.  Air  Data  navigation  could  be  used  to 
sustain  continuity  during  brief  disruptions  of  NAVSTAR  satellite  communication  either  through  jamming  or 
obscuration  of  the  antennas  in  dynamic  manoeuvres,  and  would  also  assist  in  reducing  the  time  to  reacquire 
satellites. 

DISCUSSION 


The  prime  objective  of  the  flight  demonstration  was  to  show  that  the  concept  of  extracting  attitude  from 
the  flight  control  system  was  fundamentally  viable.  Absolute  accuracy  was  not  a  major  consideration 
provided  any  Inadequacy  could  be  accounted  for.  As  the  flight  results  confirm  the  general  performance  Is 
encouraging.  There  is  some  loss  of  performance  In  dynamic  manoeuvres  associated  with  high  manoeuvre  rates 
but  not  of  a  nature  to  Invalidate  the  concept.  As  refinement  of  the  performance  would  require  substantial 
changes  to  the  aircraft  instrumentation  recording  standards,  It  was  felt  that  before  actively  pursuing 
further  development  there  should  be  a  potential  aircraft  application,  and  here  a  further  factor  had  come 
into  play. 

Aircraft  attitude  is  important  as  a  reference  for  the  regulation  of  the  aircraft's  flight  path.  Before  the 
introduction  of  inertial  navigation,  a  climb  or  dive  was  set  up  by  reference  to  the  artificial  horizon  and 
rate  of  climb  display  and  would  take  a  succession  of  control  readjustments  before  the  required  flight  path 
was  achieved.  The  inclusion  of  an  inertial  navigator  made  It  possible  to  depict  the  aircraft's  flight  path 
relative  to  the  outside  world.  Pilots  find  this  display  compelling  as  It  gives  a  direct  indication  of  how 
the  aircraft  Is  responding  to  control  demands  and  thereby  made  establishing  a  flight  path  a  much  simpler 
task  than  hitherto.. 

The  aircraft  flight  path  display  is  based  upon  inertial  navigation  (IN)  terrestial  velocities.  IN  systems 
are  difficult  to  endow  with  a  high  degree  of  self  fault  detection  and  ground  speed  runaways  can  arise 
without  any  fault  Indication.  Such  a  velocity  Increase  would  reduce  the  magnitude  of  displayed  cllmb/dlve 
angle.  A a  the  horizon  display,  also  derived  from  the  IN,  would  not  be  slgnlf icantly  affected  by  the 
runaway,  the  pilot  may  be  unaware  that  an  actual  dive  angle  was  much  greater  than  that  displayed  and  this 
could  result  in  a  hazardous  flight  condition.  Consequently  there  is  much  concern  to  improve  the  integrity 
of  the  flight  path  display.  Attempts  to  monitor  IN  ground  speed  from  non  IN  sources  do  not  appear  to  be 
sufficiently  accurate  and  this  has  led  to  demands  for  a  second  IN.  This  second  IN  would  also  improve 
attitude  integrity. 

The  coming  generation  of  the  TNs  are  likely  to  employ  Ring  laser  Gyroscopes  (RLG)  not  least  because  they 
offer  advantages  of  reduced  life  cycle  costs.  As  the  RLG  measures  rotation  rates  they  could  be  used  to 
provide  axis  rotation  rates  for  the  FCS  and  therefore  offset  the  cost  of  multiple  IN  equipments.  Thus  one 
might  expect  to  find  in  multiple  lanes  of  an  FCS  at  least  two  lanes  using  the  outputs  from  IN  RLGs. 

Looking  further  ahead  the  sensors  for  both  IN  and  FCS  requirement  might  be  provided  by  the  Integrated 
Sensor  Package  based  on  the  RLG.  The  accuracy  would  be  sufficient  for  IN  requirements,  the  integrity  and 
availability  sufficient  for  FCS  and  therefore  the  Integrity  and  availability  of  flight  path  angle  and 
attitude  data  would  be  assured. 

All  these  considerations  have  tended  to  detract  from  the  initial  Interest  in  the  Synthetic  Attitude 
technique,  and  currently  there  is  no  projected  application  with  the  consequence  that  further  development 
has  been  low  key. 

However,  it  has  already  been  mentioned  that  continuous  terrain  profile  matching  and  Navstar  provide  high 
accuracy  terrestial  velocities  and  clearly  therefore  could  provide  an  alternative  source  of  flight  path 
angle  to  an  Inertial  Navigator.  This  prospect  offers  many  alternative  future  system  applications  for  using 
Synthetic  Attitude  and  the  three  axis  magnetometer  with  either  or  both  terrain  profile  matching  and 
NAVSTAR,  without  an  Inertial  Navigator  or  to  compliment  an  Inertial  Navigator. 

CONCLUSIONS 


1.  An  investigation  has  been  undertaken  into  the  possibility  of  achieving  a  high  integrity,  high 
availability  source  of  pitch  and  bank  attitude  estimates  from  the  sensor  data  within  a  digital  Active 
Control  Technology  flight  control  system.  The  outcome  is  a  proposal  to  compensate  for  the  relatively 
high  drift  rate  of  the  ACT  gyroscopes  by  improving  the  long  term  gravitational  reference  through 
correcting  acceleration  measurements  for  inertial  accelerations  derived  from  the  ACT  Air  Data  sensors 
and  gyroscopes. 

2.  Flight  demonstration  of  an  experimental  system  on  the  digital  ACT  demonstration  Jaguar  aircraft  has 
shown  that  the  concept  is  viable.  Accuracy  is  good  in  prolonged  gentle  manoeuvres  and  although  hank 
errors  were  large  in  high  dynamic  manoeuvres,  the  errors  were  insignificant  by  completion  of  the 
manoeuvre.  Subsequent  theoretlcsl  studies  based  on  flight  data  have  Rhown  that  the  bank  error  can  ho 
reduced , 

3.  Further  development  on  manned  aircraft  has  been  overshadowed  by  the  additional  need  for  high 
integrity  flight  path  data  driving  solutions  towaid  multiple  Inertial  navigation  systems. 

4.  In  the  context  of  low  cost  systems,  it  should  be  possible  to  extend  the  role  of  this  source  of 
attitude  by  association  with  other  technical  developments  to  arrive  at  an  alternative  to  the  Inettfa* 
navigator  as  a  source  of  accurate  fertesMui  position  and  velocity  and  therefore  flight  path  angle. 
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Firstly,  attitude  can  be  used  to  extract  heading  from  a  three  axis  magnetometer  which  can  be  sa.oori.ed 
by  the  FCS  gyroscopes.  This  heading,  in  conjunction  with  True  Air  Speed  could  provide  an  Air  Data 
navigation  capable  of  being  aided  by  continuous  terrain  profile  matching  to  yield  high  accuracy 
navigation  and  terrestial  velocity. 

Alternatively,  for  operation  over  sea  or  land  not  covered  by  a  digital  height  data  base,  terrestial 
positions  and  velocity  can  be  provided  by  NAVSTAR  satellite  navigation  with  attitude  and  heading 
provided  by  the  Synthetic  Attitude  Technique  and  the  three  axis  magnetometer.  Air  Data  Navigation 
could  be  used  to  interpolate  during  brief  interruption  of  satellite  communication  during  severe 
manoeuvres  or  periods  of  jamming  and  also  assist  in  minimising  reacqulsitlon  time  of  a  satellite. 

Whether  or  not  such  types  of  system  would  ever  be  capable  of  displacing  the  Inertial  Navigator  is 
perhaps  speculative  at  this  time.  However,  at  the  very  least  they  may  be  capable  of  complementing  an 
IN  to  improve  flight  path  integrity  etc  without  the  need  for  a  second  IN. 
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THE  IMPACT  OP  VLSI  ON  GUIDANCE  AND  CONTROL  SYSTEM  DESIGN 

by 
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SUMMARY 

The  potential  of  Very  Large  Scale  Integrated  Circuit  technology  to  reduce  cost, 
including  Life  Cycle  Cost,  of  Avionics  systems  is  examined.  Trends  in  methods  of 
silicon  realisation  and  in  system  complexity  are  related  to  the  necessary  advances  in 
methods  of  system  design.  A  generic  system  design  approach  is  outlined,  which 
emphasises  the  disciplines  which  are  likely  to  enable  cost-effective  semi-custom  circuit 
design  to  become  viable. 


1.  HISTORICAL  INTRODUCTION 

In  the  1960's  the  aerospace  industry  defended  its  public  image,  always  under  attack  for 
increasing  expenditure,  by  holding  up  the  non-stick  frying  pan.  Thank  to  aerospace 
technology  the  housewife  could  deflect  her  husband's  anger  at  paying  taxes  by  offering 
him  perfectly-cooked,  never-burnt  fried  food.  If  in  retrospect  we  look  for  commercial 
and  domestic  benefits  of  aerospace  technology  the  largest  benefit  must  be  seen  in  the 
collaboration  between  the  aerospace  industry  and  the  semiconductor  industry  in  the 
development  of  the  ubiquitous  capable  and  reliable  integrated  circuit.  For  which  other 
product  can  we  look  back  on  two  or  three  decades  in  which  value  for  money  has  increased 
at  such  a  pace? 

Today  we  see  the  rapid  development  of  very  high  performance  integrated  circuits  to  solve 
problems  of  signal  processing  and  image  analysis  stimulated  by  the  need  for  Bmart  weapon 
systems,  with  the  commercial  drives  of  the  Information  Technology  industry  forcing  the 
pace  just  as  positively.  More  and  more  powerful  microprocessors  find  their  way  into 
avionics,  a  tiny  minority  sponsored  by  the  aerospace  industry.  Certainly  the 
microprocessor  has  enabled  a  considerable  advance  in  processing  power  per  unit  cost  and 
a  large  step  forward  in  reliability.  It  is  the  object  of  this  paper  to  assess  what 
further  steps  in  cost  effectiveness  might  be  obtained  through  the  use  of  the  VLSI,  and 
what  the  two  industries  need  to  do  to  make  this  possible. 

2.  AREAS  OF  SYSTEM  COST  AMENABLE  TO  REDUCTION 

Let  us  first  distinguish  between  first  cost  and  cost  of  ownership.  The  cost  of  an 
integrated  circuit  depends  on  thesize  of  the  market  into  which  it  is  sold,  the  maturity 
of  the  product,  competition  and  the  clout  of  the  Buying  Department.  Cost  of  ownership 
relates  to  reliability,  ease  of  fault  diagnosis  and  repair,  and  less  directly  to  the 
systems  heat  dissipation,  power  requirements,  connector  requirements,  weight  and  bulk. 

Trade-offs  between  first  cost  and  cost  of  ownership  are  intrinsical ly  difficult  as  the 
system  supplier  has  little  control  over  the  detailed  maintenance  and  repair  tactics 
employed  by  his  customer,  but  in  principle  all  these  areas  are  amenable  to  improvement 
by  further  application  of  VLSI.  Apart  from  the  highest  speed  areas  of  a  circuit, 
dissipation  and  area  of  silicon  real  estate  are  markedly  controlled  by  the  need  to 
provide  drivers  to  transfer  signals  from  chip  to  chip,  and  further  levels  of  integration 
of  circuits  can  dramatically  lower  system  power  levels.  A  more  logical  division  of 
systems  into  functional  blocks  can  ease  the  diagnosis  of  failures  leading  to  a 
significant  reduction  in  the  proportion  of  integrated  circuits  incorrectly  removed  ani  a 
longer  life  for  the  boards  on  which  they  are  mounted. 

Additionally  a  more  loqical  partitioning  of  systems  into  integrated  circuits  facilitates 
the  incorporation  of  built-in  self-test  facilities  into  the  chips.  A  standardised 
Interface  between  circuits  with  spare  capacity  enable  Interrogation  of  the  BIST  function 
without  additional  pin-outs  and  drivers.  Since  the  reliability  of  an  integrated  circuit 
is  largely  independent  of  its  circuit  complexity,  this  is  achieved  without  penalty  \  n 
MTBD,  and  the  failure  of  BIST  circuity  leads  to  the  removal  of  the  correct  chip. 

However  such  ideal  solutions  are  unlikely  to  be  carried  through  into  practices  mile-, 
and  until  the  avionic  industry  can  enforce  standards  and  can  afford  the  first  cost  of 
chips  to  its  own  specification.  Its  ability  to  carry  through  such  apol icy  at  today* 
juncture  in  doubtful  Indeed;  this  in  because  the  first  cost  of  nuch  devices  would  he 
dominated  by  design  cost. 

Trends  in  Design  Cost  of  Integrated  Circuits 

In  1900  Frank  Michelettl  of  Rockwell  Illustrated  the  trends  in  leuiqn  cost  ovoi  1  h' 
decades;  the  cost  of  tc  design  roue  linearly  ns  the  numh.o  of  gates  incre.-o*  I 
Although  wo  could  see  promise  for  de.-tln..  In  per  '|.ite  denlgn  .  out  ■■  with  udvuneed  (’An  i  y 
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Impression,  for  full  custom  circuits,  is  that  $100  per  gate  still  holds  certainly  for 
microprocessors  and  other  circuits  where  a  high  degree  of  geometrical  repetition  does 
not  dominate.  For  such  circuits  where  detail  layout  is  important  to  fulfil  performance 
and  yield  goals  there  is  little  sign  of  a  marked  fall  in  design  costs  per  circuit  unit. 
However  where  a  design  is  required  that  does  not  need  optimal  packaging  to  obtain 
performance  or  yield,  some  different  approaches  may  be  made  which  lower  design  cost, 
principally  the  Gate  Array  and  the  Cell-Based  System,  to  produce  Semi-Custom  designs. 
Semi-custom  design  however  should  not  be  defined  in  terms  of  techniques  such  as  the 
above  because  it  limits  our  concepts  of  system  design;  gate  arrays  are  only  the  on- 
silicon  analogy  of  design  by  connecting  up  individual  transistors,  and  cell  based  design 
can  take  us  back  to  SSI  technology  fitting  together  flip  flops,  D  types  or  perhaps 
registers.  A  better  concept  of  semi-custom  design  is  systems  design  where  units  of 
circuit  in  which  the  system  designer  has  experience  and  confidence  are  interconnected  on 
silicon  to  meet  a  requirement.  The  circuit  units  could  conceivably  be  similar  to  the 
common  devices  he  would  look  for  in  a  pcb  design;  registers,  buffers,  decoders  or  even 
microprocessors  leading  to  what  is  commonly  termed  a  raacrocell  approach.  The  silicon 
vendor  is  thus  potentially  able  to  'shrink'  mature  design  into  a  finer  geometry  process, 
and  by  combining  them  meet  a  system  requirement  in  a  fraction  of  the  previous  numberof 
devices.  Such  combined  systems  however  are  likely  to  have  a  more  limited  market,  will 
need  system  knowledge  to  select  and  design  (and  equally  to  specify  tests  for)  and  except 
in  limited  areas  offer  a  poor  return  for  the  design  resources  of  a  component 
manufacturer . 

However  as  a  joint  design  exercise  for  the  systems  manufacturer  and  the  silicon  designer 
the  approach  deserves  examination  if  the  design  process  can  be  mechanised  in  an  error- 
free  manner,  the  macrocells  are  proved  by  repetitive  manufacture  and  use,  and  the 
overall  circuit  with  test  access  and  test  routines  can  be  confidently  simulated  by  the 
customer  (since  'breadboarding'  of  designs  is  impossible). 

‘Software  Preservation' 

There  is  one  further  aspect  worth  considering,  which  is  that  of  software.  The  major  ] 
of  avionic  systems  are  software  programmable,  not  just  because  a  microprocessor  is 
currently  , cheaper  than  a  custom  logic  circuit,  but  because  a  significant  number  of 
design  parameters  cannot  be  finalised  when  the  design  must  be  committed.  These  include 
airframe  derivatives,  weapon  constants,  sensor  properties,  symbology  and  other  man- 
machine  interface  parameters.  Flexibility  in  design  is  thus  an  inherent  need,  not  a 
side  benefit  of  digital  technology.  Whereas  to  an  extent  software  may  be  separately 
developed  on  a  host  machine  and  down  loaded,  to  use  a  host  machine  for  real  time 
software  commissioning  in  conjunction  with  breadboard  peripherals  is  expensive.  Hence 
the  tendencey  to  demand  a  breadboard  for  real  time  software  proving  using  available 
microprocessors.  On  design  completion  however  the  breadboard  needs  to  be  'shrunk'  into 
a  silicon  solution.  If  such  a  macrocell  approach  were  available  and  the  major 
components  had  been  selected  for  process  compatibility,  then  instead  of  rewriting  the 
software  to  suit  the  compact  hardware  solution  we  could  simply  shrink  the  circuitry  into 
macrocellchips  and  we  could  perhaps  preserve  our  software  investment  intact.  A  further 
benefit  is  that  test  routines  would  not  have  to  be  reworked. 

3.  STEPS  NEEDED  TO  ACHIEVE  COST  EFFECTIVE  SEMI-CUSTOM  DESIGN 

3.1.  Workstations 


A  whole  new  business  has  recently  mushroomed  into  existence  in  the  supply  of  engineering 
workstations.  These  enable  engineers  to  design  semicustom  circuits  without  continuous 
access  to  a  mainframe  computer  and  hence  provide  a  cost-ef fecive  design  tool. 

Much  of  the  design  work  can  be  independent  of  the  design  rules  of  a  particular  silicon 
process.  When  the  design  reaches  the  point  at  which  the  designer  needs  to  incorporate 
the  particular  rules  of  a  chosen  or  candidate  process  the  workstation  permits  him  to  do 
so,  the  dominant  parameters  having  been  suppplied  by  the  process  manufacturer  to  the 
designer  of  the  workstation.  By  an  extension  of  such  a  facility  it  is  likely  that  the 
workstation  could  access  the  silicon  house's  standard  cell  library  and  progressively 
allow  design  to  take  place  at  a  higher  level,  still  allowing  the  workstation  user  the 
facility  to  design  his  own  cells  from  the  basic  design  rules  and  integrate  his  design  at 
a  mixture  of  levels. 

3.2.  Test  Methods 

A  further  natural  extension  to  the  workstation  principle  to  the  inclusion  of  access  to 
cell  libraries  could  be  to  add  a  library  facility  of  test  strategies.  Besides  making 
available  historic  data  on  proved  test  appraches  to  cells  it  could  prove  feasible  to 
adapt  a  cell  of  proved  testability  to  solve  a  particular  logic  problem  rather  than  adopt 
a  logic  solutionand  subsequently  attempt  to  wrap  a  test  strategy  around  a  less  amenable 
logic  array. 


3.3.  S i mutators 

Inherent  iri  proving  a  design  before  committing  it  to  prototype  manufacture  is  the  use  of 
a  logic  simulator.  In  a  host  machine  each  step  in  the  propagation  of  inputs  through  the 
logic  solution  is  simulated  in  software,  albeit  at  a  minute  rate  compared  to  the 
reaction  time  of  the  system  to  be  realised.  Such  simulators  are  powerful  analytic  tools 
in  showing  up  weaknesses  in  the  design.  However  the  slow  speed  operation  can  be  an 
embarrassment,  and  when  it  come#  to  simulating  a  complex  system  with  software  embellel 
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the  slow  processing  holds  up  the  design  process.  Two  steps  in  alleviating  this  problem 
are  the  use  of  powerful  parallel  processors  in  the  host  machine  and/or  the  use  of  real 
time  hardware  as  part  of  the  simulator. 

3.4.  Floor  Plan  Design 

The  top  level  layout  of  major  cells  in  a  VLSI  circuit  is  coventional ly  termed  floor  plan 
design.  This  step  is  crucial  to  economic  design  and  is  a  highly  heuristic  process  in 
which  a  limited  number  of  individuals  excel.  If  we  are  to  open  up  systems  design  in 
silicon  to  a  greater  number  of  individuals  this  is  an  area  worthy  of  attention  along 
with  partitioning  a  system  into  a  workable  set  of  chips.  It  is  an  area  of  design 
activity  which  is  believed  amenable  to  a  Knowledge  Based  System  approach  where  a  number 
of  straightforward  rules  of  play  need  to  be  combined  with  a  strategic  feel.  It  is 
likely  to  be  amenable  to  the  synthesis  of  rules  by  example  in  the  way  that  the  rules  of 
chess  end  games  have  been  developed  from  interaction  of  knowledge  engineers  with  chess 
masters  and  the  encoding  of  examples  into  generic  rules  by  an  Expert  Systems. 

3.5.  Speeding  up  the  Design  Process 

The  impression  that  tends  to  be  given  of  the  design  process  in  silicon  is  of  a  steady 
top  down  process,  mapping  each  level  of  design  and  verification  exactly  on  to  the  next 
process  by  employing  a  set  of  layered  design  tools  in  sequence.  This  before  the 
introduction  of  workstations  is  probably  the  ideal  to  which  designers  aspired,  as  the 
entry  of  design  data  from  one  layer  to  the  next  tended  to  be  a  manual  process,  error- 
prone,  and  one  no  designer  wanted  to  carry  out  more  than  once.  However,  this  is  not  the 
way  in  which  practical  designers  proceed  in  other  fields.  Given  a  highly  integrated  set 
of  tools  with  minimum  human  intervention  in  passing  from  one  layer  to  the  next,  and  a 
comprehensive  set  of  library  information  accessible  at  all  layers  the  designer  will 
revert  to  his  normal  mode  of  iterating  rapidly  up  and  down  the  process,  trading  off 
floor  plan  estimates  with  testability  criteria  and  shaping  his  design  towards  an  optimum 
in  a  way  that  a  strict  top  down  mapping  process  is  unlikely  to  permit. 

There  are  other  reasons  which  drive  the  design  process  towards  an  iteractive 
evolutionary  strategy.  The  systems  designer  wishes  to  keep  his  options  open  as  long  as 
possible  not  only  on  which  silicon  process  to  select  but  which  vendor  to  placce  an  order 
with.  He  wishes  to  go  through  the  design  process  to  the  point  at  which  he  can  trade  off 
more  than  one  silicon  technology  and  to  have  first  cut  design  data  to  offer  a 
prospective  vendor  to  obtain  a  quotation.  The  prospective  vendors  may  wish  to  suggest 
changes  and  he  will  have  to  rework  his  framework  to  assess  their  impact.  All  these 
desirable  attributes  are  feasible  if  the  design  suite  is  integrated  and  has  access  to 
the  appropriate  cell,  design  rule,  testability  and  layout  library  functions. 

3.6.  Recipes  for  Successful  Implementalon 

Such  a  plan  as  described  depends  on  the  quality  of  the  tools,  libraries  and  design 
rules.  It  is  axiomatic  that  the  quality  of  software  depends  largely  oq  the  size  of  the 
user  base,  the  willingness  of  users  to  report  defects  and  of  generators  to  eliminate 
them.  Broadening  the  user  base  as  described  should  have  the  requisite  effect  of 
detecting  and  reporting  errors.  An  efficient  software  update  service,  possibly  over 
data  links,  should  prove  a  more  effective  control  than  amending  catalogues.  A  more 
effective  control  by  the  silicon  vendor  in  correcting  process  defects  and  amending 
design  rules  will  be  needed  to  maintain  a  qualified  process  tolerant  to  a  wide  range  of 
designers . 

Experience  however  indicates  that  the  greatest  Bingle  hindrance  to  right-first-time 
design  lies  in  errors,  inconsistencies  and  misunderstandings  at  the  initial 
specification  stage.  This  is  also  the  area  in  which  VLSI  design  aids  are  probably  the 
least  advanced.  However  recent  trends  in  logic  programming  languages  and  other 
declarative  languages  suggests  that  the  AI  community  may  again  have  some  solutions  to 
offer . 


3.7.  A  Final  Suggestion 

If  this  general  approach  becomes  feasible  in  the  years  to  come  it  would  also  become 
feasible  to  standardise  test  interfaces,  introsystem  bus  standards  etc  to  the  point  that 
in  a  similar  way  to  the  adoption  of  MIL  STD  1553B  for  data  exchange  between  systems  and 
the  availability  of  standard  terminal  chips,  we  might  very  well  find  in  the  cell 
libraries  cells  which  are  qualified  to  MIL  Standards  and  available  in  more  than  one 
technology . 
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REUSABLE  SOFTWARE  -  A  CONCEPT  FOR  COST  REDUCTION 

Christine  M.  Anderson 
Marlow  Henne* 


Air  Force  Armament  Laboratory,  AFATL/DLCM 
Eglin  A.  jrce  Base,  Florida  32542 
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Summary 

The  cost  of  military  computer  systems  is  increasing  rapidly.  It  is  alarming  to  consider 
that  not  only  the  total  cost  of  military  computer  systems  is  increasing,  but  the  per¬ 
centage  of  the  total  cost  attributed  to  software  is  also  increasing.  Several  underlying 
causes  for  this  increase  are  discussed.  While  the  new  United  States  (US)  Department  of 
Defense  (DoD)  standard  high  order  language,  Ada,  will  significantly  help  to  reduce  the 
software  cost  growth,  other  solutions  must  also  be  sought.  Reusable  software  component 
technology  and  associated  parts  composition  systems  are  presented  as  possible  solutions. 
Recommendations  for  future  research  are  provided. 

1 •  Software  Cost  Growth 


Much  growth  in  the  power  and  sophistication  of  US  defense  systems  is  due  to  the  exten¬ 
sive  application  of  computers.  Almost  every  defense  system  fielded  today  contains  com¬ 
puters  whose  software  performs  mission-critical  functions  [1].  Most  of  these  are 
embedded  computers.  An  embedded  computer  can  be  thought  of  simply  as  an  integral  com¬ 
ponent  of  a  larger  system.  Defense  systems  or  subsystems  using  embedded  computers 
include  sensors,  electronic  warfare  systems,  weapon  system  control,  communications,  com¬ 
mand  and  control,  navigation,  and  target  acquisition. 

The  cumulative  Inventory  of  DoD  embedded  computers  is  projected  to  grow  from  1D,U00  in 
1980  to  nearly  260,000  by  the  end  of  the  decade.  While  hardware  quantity  is  increasing 
rapidly,  the  percentage  of  the  total  dollar  attributed  to  software  will  increase  from  b3 
percent  of  the  total  in  1980  to  8b  percent  of  the  total  by  1990.  This  translates  to  a 
staggering  projection  of  §32  billion  (absolute  dollars)  for  annual  DoD  embedded  software 
expenditures  in  1990  compared  to  §5.9  billion  for  DoD  embedded  computer  hardware  [ 2  J . 

There  are  several  underlying  causes  for  the  increase  in  software  cost  over  the  past 
decade  and  the  projections  cited  above.  A  prime  reason  is  the  large  variety  of 
programming  languages  that  has  evolved.  By  1974,  there  were  over  4UU  languages, 
dialects  and  subsets  of  which  few  supported  modem  methodologies  for  structured  program 
development,  making  maintenance  (accounting  for  65X  of  the  software  life  cycle  cost  (3)) 
a  nightmare  (4], 

Another  contributing  factor  to  the  increased  expenditure  in  DoD  embedded  computer  soft¬ 
ware  la  inherent  in  software  itself--its  flexibility.  DoD  has  been  increasingly 
exploiting  software's  flexibility  in  developing  modern  weapon  systems.  As  reported  by 
the  USAF  Scientific  Advisory  Board,  software  "can  embody  and  implement  abstract  opera¬ 
tional  concepts;  it  has  no  manufacturing  cycle  or  cost;  it  can  be  modified  quicker  and 
cheaper;  it  does  not  wear  out;  and  it  can  incorporate  new  features  and  functions  in  an 
evolutionary  fashion  without  major  investment  in  new  systems  and  hardware"  13). 


The  Air  Force  F-111  program  illustrates  this  point.  The  table  below  compares  similar 
capabilities  (additional  offset  aim  pointer  and  updated  weapon  ballistics)  implemented 
through  hardware  on  the  F-111  A/E  and  in  software  on  the  F-111  D/F.  Liven  an  existing 
software  support  facility,  the  savings  due  to  making  the  changes  via  software  rather 
than  hardware  have  ratios  of  about  5U:1  in  cost  and  3:1  in  time  lb). 


Modification 

#1 

*2 

#3 


Via  Hardware 

§5. 28M/42  mo 
§1 .05M/36  mo 
§8.00M/78  mo 


Via  Software 

§0.I0M/16  mo 
§0 . 02M/ 1 0  mo 
§0.U2M/1 3  mo 


Cos  t /Time 
Rat i os 

32.8: 1/2.6: 1 
82 . 5:  1  /  J.t  ■  1 
••(HI.  1/3.2:  1 


Another  cost  contributor  is  the  fact  that  software  development  is  labor-intensive. 
Typically  each  line  of  a  computer  program  is  written  by  hand.  Unfortunately,  while  the 
demand  for  software  is  Increasing,  the  number  of  qualified  personnel  is  not  increasing 
as  rapidly.  The  Air  Force  Scientific  Advisory  Board  reported  that  theie  is  a  u%  annual 
increase  in  qualified  software  personnel,  a  4%  annual  increase  in  software  productivity 
(based  on  current  methods)  and  a  widening  gap  based  on  a  1 2t  annual  Increased  demand  for 
new  computer  software  (5). 


In  more  absolute  terms,  the  shortfall  between  supply  and  demand ,  currently  measures 
50,000-100,000  programmers,  and  may  rise  to  1.2  million  by  1 9'»(|  it  in,  dial  measures  ate 
not  taken  j  7  ) . 


*Mr  Henne  in-now  at.  Harris  Corporation,  OHIO  Software  Dpi-  r  a  I  I  rum  ,  tie  I  (---u  me  ,  Florida  ( 
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Another  cost  contributor  is  the  probLem  of  building  reliable  software.  Instances  of 
software  reliability  problems  include  false  alerts  for  the  North  American  Defense 
(NORAD)  system,  space  shuttle's  on-pad  launch  delay,  and  test  missiles  (and  even 
airplanes)  hitting  mountains  they  were  programmed  to  fly  over  (5J.  The  criticality  of 
the  reliability  problem  is  made  clear  by  C.A.R.  Hoare's  warning:  "The  next  rocket  to  go 
astray  as  a  result  of  a  programming  language  error  may  not  be  an  exploratory  space 
rocket  on  a  harmless  trip  to  Venus.  It  may  be  a  nuclear  warhead  exploding  over  one  of 
our  own  cities"  [81 .  Developing  reliable  mission  critical  software  where  errors  can 
translate  into  life  or  death  situations  is  a  time  consuming  and  costly  process. 

To  briefly  summarize,  the  reason  for  the  tremendous  cost  growth  in  defense  embedded  com¬ 
puter  software  is  multifaceted.  Contributing  factors  include:  the  large  number  of 
existing  computer  languages  currently  being  used;  the  increased  exploitation  of 
software's  flexibility  resulting  in  its  increased  utilization;  the  labor-intensive 
nature  of  software  resulting  in  a  shortage  of  qualified  software  engineers;  and  the 
complexity  associated  with  meeting  the  reliability  requirements  of  mission  critical 
software.  Solutions  to  all  but  the  second  factor  can  be,  and  currently  are  being 
sought.  The  second  factor  is  really  a  reflection  of  our  "age  of  information"  rather 
than  a  problem. 

One  of  DoD's  more  notable  technological  and  managerial  solutions  is  the  development  and 
standardization  of  one  high  order  language  for  mission-critical  computer  systems--Ada . 
While  Ada  has  a  tremendous  potential  to  reduce  costs  in  all  phases  of  the  software  life 
cycle,  Ada  alone  is  not  a  panacea  for  DoD's  software  problems.  We  cannot  hope  to  meet 
the  software  needs  of  the  IVVOs  and  beyond  if  we  continue  to  develop  Ada  software  on  a 
line-by-line  basis.  One  approach  is  to  develop  the  concept  of  software  reusability 
using  Ada  as  the  cornerstone. 

2 .  Software  Componentry 

The  reuse  of  software  components  has  the  potential  of  reducing  the  shortfall  of  required 
software  engineers,  while  increasing  software  reliability. 

There  is  a  great  deal  of  interest  in  software  component  technology.  The  following 
discussion  represents  a  collage  of  thinking  on  the  subject  that  has  been  generated  over 
the  past  several  years. 

"Having  reusable  software  available  can  significantly  reduce  system  development  time. 

The  more  software  that  can  be  obtained  off-the-shelf,  the  less  new  software  that  must  be 
created.  The  risks  involved  are  thus  reduced,  since  off-the-shelf  software  should 
already  have  been  well  tested  and  debugged.  Reduced  time  and  risk  enhance  the  probabil¬ 
ity  that  a  project  will  be  completed  on  time  and  within  budget .. .Such  benefits  consti¬ 
tute  a  major  resource  savings,  ultimately  reducing  the  required  DoD  software 
investment."  -  Commander  J.  Cooper,  "Increased  Software  Transferability  Dependent  on 
Standardization  Efforts,"  Defense  Management  Journal,  October  1  y 7 . 

"Software  reuse  saves  development  time  and  money,  and  field  proven  software  is  more 
reliable."  -  Strategy  for  a  DoD  Software  Initiative,  I  October  1482. 

"The  Introduction  of  reusable  software  components  can  significantly  relieve  the  resource 
demands  thus  assuring  continued  responsiveness  to  new  threats  through  the  introduction 
of  new  or  enhanced  weapon  systems".  -  Report  of  the  DoD  Joint.  Service  Task  force  on 
Software  Problems,  JO  July  1482. 

Recommend  the  Air  Force  "Initiate  a  set  of  formal  laboratory  programs  to  define  and 
exploit  opportunities  for  software  standardization  through  reusable  soitware  packages 
in  selected  application  areas."  -  Dr  Edwin  8.  Stear,  former  Chief  Scientist  of  the  Air 
Force  In  a  Briefing  to  General  Marsh,  AFSC  Commander,  14  March  19bJ. 

"Achieving  reusability  in  mission  software  represents  a  good  opportunity  for  dramatic 
productivity  gains  since  using  existing  software  in  lieu  of  new  software  not  only  saves 
money  but  also  saves  documentation  costs  and  test  costs.  And  since  the  software  has 
already  been  verified,  it  Increases  the  quality  of  the  new  system."  -  The  Array  Science 
Board  I48J  Summer  Study  on  Acquiring  Army  Software. 

2 . 1  A  Hardware  Analogy 

There  is  nothing  unique  about  component  technology:  it  has  existed  tor  years  in  the 
digital  electronics  world.  The  uniqueness  emerges  when  we  apply  this  technology  to  s< .-it  - 
ware.  To  a  great  extent,  It  can  be  said  that  today’s  software  design  process  ha9  not 
progressed  much  beyond  the  early  digital  design  methodology  in  tin  digital  hardware 
Industry. 

In  the  late  1450'a  and  early  1 4bU ' s  low  level  components,  such  as  vacuum  tubes,  tran¬ 
sistors,  resistors,  and  capacitors,  existed  for  the  design  engineer  to  use  for  his  cir¬ 
cuit  design.  A  strong  anology  can  be  drawn  between  these  and  the  assembly  language 
statements  used  by  the  software  engineers  of  today.  Each  time  a  ;  irt  icular  kind  of  cir¬ 
cuit,  such  as  a  gate  or  flip-flop  was  needed,  the  engineer  li.nl  to  <  le:t  the  type  ot 
circuit  and  the  components'  values  which  would  be  used.  when  l.rtre  mtities  ot  a 
t  Icular  kind  of  circuit  were  needed  on  a  project,  l  lie  engineer  could  reuse  his  design 
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for  that  project.  The  design  of  each  circuit  for  large  projects  was  such  a  chore, 
individual  engineers  kept  earlier  designs  and  tried  to  borrow  from  them  on  new  projects 
whenever  possible.  This  also  led  to  published  design  compendia  of  circuits  much  as  may 
be  found  today  in  collected  algorithms  and  published  math  or  utility  routines. 

Enterprising  companies  realized  that  significant  markets  existed  tor  certain  low  level 
digital  building  blocks  and  began  to  develop  circuit  cards  which  contained  Individual 
gates,  flip-flops,  etc.  These  circuit  cards  (modules)  made  a  significant  contribution 
to  the  design  of  systems.  By  using  these  ready  made  modules,  the  designer  was  freed  to 
do  more  productive  system  design.  While  these  modules  were  helpful,  a  significant 
problem  still  existed  when  trying  to  use  modules  from  different  suppliers.  Each 
supplier  chose  his  own  voltage  levels  for  logic  "one"  and  "zero",  and  other  interface 
details  were  often  different. 

This  level  of  modularity  is  close  to  that  which  we  are  approaching  today  in  software. 

We  have  standard  math  and  utility  routines  which  exist  in  libraries  but  little  else  is 
available  for  general  reuse. 

Once  the  advantages  of  reusing  hardware  designs  became  evident,  the  next  step  was  to 
improve  the  production  technology  for  hardware  modules.  As  integrated  circuits  (ICs) 
became  possible,  computer  and  general  digital  components  repr  ;ented  the  vast  majority 
of  units  built.  This,  of  course,  was  due  to  the  modular  nature  of  digital  designs  with 
their  many  common  components  and  to  the  design  methodology  which  had  already  begun  sup¬ 
porting  reusable  module  designs.  ICs  enabled  entire  flip-flops  and  other  circuits,  which 
had  previously  taken  an  entire  circuit  card,  to  be  fabricated  on  a  single  IC.  As  pro¬ 
duction  technology  improved,  more  circuits  were  placed  on  individual  ICs  to  form  inter¬ 
mediate  modules  such  as  counters,  adders,  etc.  Today,  we  find  Very  Large  Scale 
Integrated  (VLSI)  circuits  which  represent  large  portions  of  the  overall  system.  Since 
these  circuits  are  so  large  in  scope,  most  systems  may  not  use  more  than  one  of  a  given 
circuit.  Even  though  we  may  only  need  one  circuit  of  a  given  kind,  production  tech¬ 
niques  and  reusability  have  reduced  the  cost  of  these  complicated  circuits  to  a  level 
where  they  are  competitive  to  use  for  a  variety  of  applications.  A  good  example  of  this 
is  the  microcomputer.  Today  we  find  full-scale  digital  computers,  on  a  single  IC,  per¬ 
forming  timing  tasks  for  small  appliances  which  previously  used  analog  circuits  or 
mechanical  timers. 

If  the  current  trend  continues  toward  software  module  production  and  reuse,  we  should 
see  the  size  and  use  of  common  software  modules  expand  rapidly,  paralleling  the  develop¬ 
ment  of  hardware  modules. 

Thus ,  an  analogy  can  be  made  between  the  inventory  of  software  components  and  the  inven¬ 
tory  of  prefabricated  circuits  available  from  semiconductor  manufacturers.  The  software 
developer  resembles  the  computer  designer,  who  determines  the  gross  system  structure 
and  the  interconnections  between  circuits  but  relies  on  the  prefabricated  components  for 
low-level  operations.  Over  the  past  few  years,  larger  components  have  been  developed. 

A  similar  technology  is  needed  in  the  software  world  |VJ. 

2 . 2  Software  Componentry  Methodology 

Past  critics  have  maintained  that  the  software  reusability  concept  has  not  flourished 
because  individual  concrete  programs  are  oo  specialized  to  be  reused.  However,  with 
the  advent  of  Ada,  we  now  have  the  means  to  more  easily  construct  software  components  at 
a  more  abstract  level.  Ada's  package  feature  will  permit  Che  creation  of  software 
packages  analogous  to  sealed  hardware  components  that  consist  of  an  external  interface 
or  specification  and  an  internal  body  v*irh  the  user  cannot  alter.  Ada's  generic 
feature  extends  the  package  concept  to  include  a  parameterization  facility  for  tailoring 
packages  to  particular  needs. 

Additionally,  Ada's  strong  typing  imposes  constraints  on  module  interconnections  and 
allows  consistency  between  formal  parameters  of  module  definitions  and  actual  parameters 
of  module  invocations  to  be  enforced  at  compile  time  [10).  These  features  provided  by 
Ada  for  reusable  software  components  are  richer  than  those  of  its  predecessors. 

Studies  investigating  methodologies  for  applying  Ada  to  develop  reusable  software  com¬ 
ponents  are  only  now  being  initiated.  Thus  the  technique  Involved  in  developing  generic 
packages  is  not  well  defined  and  almost  no  implementation  experience  exists.  A  recent 
Air  Force  study  identified  criteria  which  impact  the  reusability  of  software.  Chief 
among  these  are  application  Independence,  modularity,  simplicity  and  code  seit- 
descript iveness  [ 1 1 J . 

Application  Independence  can  best  be  achieved  via  generalized  data  structures  such  as 
parametri  ally  described  arrays;  minimal  vise  of  machine  dependent  constructs  such  as 
machine  language  code,  microcode  and  specific  1/0  features;  and  implementation  of  well 
chosen  common  functions. 

The  components  should  be  encapsul  ted  in  such  a  way  that  their  external  usage  is  com¬ 
pletely  defined  by  an  Interface  specification,  wtn i c h  is  physically  distinguishable  from 
the  Implementation  portion.  This  Interface  should  be  as  firm  and  well  defined  as  that 
for  the  hardware  interconnection  to  an  integrated  circuit.  Further,  components  should 
be  orthogonal.  This  means  that,  iinlon.i  contraindicated  by  their  interface  descriptions, 
they  may  he  used  in  each  other's  presence  112). 
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Simplicity  in  both  design  and  implementation,  will  facilitate  program  understanding  and 
modification.  The  quantitative  counts  (number  of  operators,  operands,  nested  control 
structures,  nested  data  structures,  executable  statements,  statement  labels,  decision 
points,  parameters,  etc.)  will  determine  to  a  great  extent  how  simple  or  complex  the 
source  code  is. 

Component  source  code  should  be  as  self-descriptive  as  possible.  One  approach  to 
achieving  this  goal  is  to  embed  compilable  program  design  language  (PDL)  in  the  source 
code,  thus  insuring  up-to-date  cross-correlation  between  design,  code  and  documentation. 
By  using  valid  Ada  procedure  names  and  declarations  in  addition  to  commentary  in  the  PDL 
design,  rigorous  checking  of  the  PDL  can  be  performed. 

In  order  to  encourage  use  of  software  components  once  they  are  implemented,  a  systematic 
approach  to  accessing  and  combining  particular  instances  of  components  must  be  pursued. 
This  approach  focuses  on  parts  composition  system  technology. 

3.  Parts  Composition  Technology 

A  parts  composition  system  supports  the  building,  testing,  and  optimizing  of  programs 
using  reusable  components.  This  system  muse  include,  at  a  minimum,  cataloging  and 
retrieval  facilities,  a  language  to  compose  parts,  a  warehouse  of  parts,  and  an  editing 
and  testing  facility.  The  Japanese  have  reportedly  achieved  up  to  an  85X  reuse  rate  in 
their  software  factories  by  using  these  currently  available  information  retrieval  tech¬ 
niques  [131.  Toshiba's  Fuchu  Works  Software  Factory,  specializing  in  real  time  applica¬ 
tions,  averages  2870  instructions  per  programmer  per  month  [14),  compared  to  a  U.S. 
software  productivity  rate  of  75  to  280  lines  per  programmer  per  month  [15).  Toshiba's 
productivity  is  due  in  large  part  to  software  reuse.  A  mature  parts  composition  system 
will  include  thousands  of  software  parts  available  in  a  common  environment.  In  theory, 
a  software  engineer  can  attempt  to  combine  any  two  available  parts  so  the  system  muse 
provide  robust  mechanisms  to  insure  reliable  and  meaningful  parts  composition  [IbJ. 

Parts  composition  systems  may  range  from  manual  and  semiautomated  software  parts  cata¬ 
logs  to  more  advanced  automated  systems,  systems  that  may  even  include  artificial 
intelligence  (AI)  (i.e.,  expert  systems). 

An  expert  system  is  a  man-machine  system  with  specialized  problem  solving  expertise. 

The  first  generation  of  AI  focused  on  defining  a  general  mechanism  of  intelligence  for 
expert  systems.  The  current  perspective  holds  that  the  true  power  of  the  expert  system 
comes  from  the  knowledge  it  possesses,  not  from  the  particular  formalisms  and  inference 
schemes  it  employs  [17].  Thus,  it  is  essential  to  capture  the  knowledge  of  the  applica¬ 
tion  domain  to  be  modeled. 

While  various  domains  of  knowledge  are  being  studied  and  common  functions  extracted  for 
later  component  implementation,  parallel  investigations  of  meLhods  to  organize,  index, 
describe,  and  reference  software  components  must  also  be  pursued.  Further  in  conjunc¬ 
tion  with  all  of  these  activities,  studies  aimed  at  producing  more  advanced  user 
friendly  systems  that  change  data  and  algorithmic  representations  into  code,  that  is, 
software  generator  systems  must  continue. 

The  following  example  describes  one  scenario  of  a  user  interacting  with  a  knowledge- 
based  parts  composition  system.  Assume  the  user  is  interested  in  locating  a  guidance 
algorithm  for  a  particular  armament  electronics  (armonics)  application.  He  asks  the 
system  for  retrieval  of  all  generic  classes  of  guidance  software  that  meet  his  require¬ 
ments.  The  system  may  actually  solicit  (via  leading  questions)  the  requirements  from 
him.  After  reviewing  these  generic  classes,  he  asks  the  system  to  retrieve  more 
detailed  descriptions  of  certain  components.  Following  the  examination  of  these,  a  more 
detailed  review  of  the  specifications  associated  with  a  select  few  components  is  per¬ 
formed.  Finally,  the  actual  component  code  Is  examined.  This  retrieval  mechanism  can 
be  made  increasingly  intelligent  by  providing  facilities  for  querying  the  user  for  addi¬ 
tional  Information  if  no  component  is  found,  by  searching  for  related  components  or  by 
custom  tailoring  components  to  match  the  user's  request. 

This  example  is  still  at  a  falrLy  low  level  of  automation.  A  more  advanced  parts  com¬ 
position  system  would  allow  the  user  to  describe  (in  a  user  oriented  high  level  speciti- 
cation  language)  an  entire  subsystem's  requirements  (e.g.,  autopilot  for  a  particular 
type  of  weapon).  The  system  would  query  the  user  concerning  critical  aspects  of  the  sub¬ 
system  and  then  proceed  to  retrieve,  customize  and  compose  the  necessary  software. 

There  are  several  parts  composition  systems  commercially  available  that  offer  varying 
degrees  of  aid  to  the  user.  Thus  far,  none  have  been  applied  to  the  development  of 
weapon  system  software.  An  evaluation  of  these  systems  should  be  performed. 

4 •  A  Re  1  ate d  K f  for t 

The  US  Air  Force  Armament  Laboratory  has  Just  initiated  a  program  that  addresses  sott- 
ware  component,  technology  and  supporting  parts  composition  systems.  The  program,  Con  r..  >  - 
Ada  Missile  Packages  (CAMP),  features  (wo  related  study  efforts:  a  commonality  study 
and  a  parts  composition  study.  The  objective  of  the  commonality  study  is  to  invest  ig.it e 
the  feasibility  ot  developing  reusable  Ada  components  tor  anionic.-;  systems.  The 
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approach  is  to  examine  existing  missile  software  and/or  associated  documentation  in 
order  to  identify  candidate  common  functions  for  component  implementation .  The  second 
study,  to  be  performed  concurrently,  features  an  investigation  or  current  parts  com¬ 
position  system  technology  and  recommendations  regarding  the  most  practical  approaches 
for  achieving  both  near-term  and  long-range  benefits.  Based  on  the  results  of  the 
studies,  a  follow-on  implementation  phase  will  commence  aimed  at  developing  a  parts  com¬ 
position  system  and  associated  reusable  software  armonics  components. 

5.  Conclusion 

In  closing,  it  should  be  stressed  that  software  componentry  will  not  evolve  quickly  or 
cheaply.  Both  mental  and  organizational  road  blocks  must  be  overcome.  However,  the 
technology  holds  such  a  cremendous  potential  for  slowing  the  cost  growth  in  DoD  mission- 
critical  software,  further  research  is  Imperative.  This  research  should  be  aimed  at 
joining  parts  composition  technologists,  who  are  often  from  academia,  with  DoD  mission- 
critical  specialists  in  order  to  achieve  a  fruitful  blending  of  composition  techniques 
and  DoD  knowledge  domains. 
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ADOAM  is  a  database  management  system  that  maintains  a  real-time  database  which  is 
partitioned  and  replicated  amongst  a  number  of  computers  connected  in  a  local  area 
network.  With  a  centralised  or  quasi -di st r i buted  database,  damage  to  particular 
components  causes  effective  loss  of  the  whole  system  due  to  loss  of  data.  ADDAM  can 
tolerate  substantial  damage  to  the  network  with  little  degradation  of  performance 
or  loss  of  data.  In  this  paper  we  describe  some  of  the  protocols  used  by  ADDAM  to 
maintain  data  consistency.  Our  work  shows  that  it  is  possible  to  provide  a  very  high 
degree  of  data  reliability  within  a  resilient  real-time  distributed  database.  However, 
the  cost  is  quite  large,  both  in  terms  of  the  amount  of  computer  resources  consumed  by 
the  database  software  and  the  number  of  inter-node  messages  generated  on  the  network. 


1.  INTRODUCTION  TO  ADDAM  (The  A..R.E.  Distributed  DAtabase  Management  System' 

1.1  INTRODUCTION 

ADDAM  is  a  distributed  database  manager  that  maintains  a  real-time  database  which  is 
partitioned  and  replicated  over  a  local  area  network.  ADDAM  is  part  of  a  larger  programs 
of  work  funded  by  the  United  Kingdom  Ministry  of  Defence  and  carried  out  jointly  by 
Software  Sciences  Limited  and  the  Admiralty  Research  Establishment  (Portsdown).  The 
network  on  which  ADDAM  runs  is  the  ASWE  Serial  Highway  [1]:  this  network  has  a  very  low 
error  rate  and  supports  a  true  broadcast  facility. 

ADDAM  is  characterised  by  the  following  features: 

a)  data  types  partitioned  into  units  of  replication  (’pages'); 

b)  replications  of  data  partitions  automatically  generated  for  su r v l v ab  i  1 1 1 >  and 
local  access; 

c)  synchronised  updates  for  multiple  data  copies; 

d)  concurrent  update  protection  without  record  locking; 

e)  consistency  maintenance  between  multiple  data  copies  under  conditions  of 
network  damage; 

f)  supports  relational  database  model; 

q)  user  interface  supports  access  to  relational  data  mode]  without  reference  to 
data  location; 

h)  choicp  of  update  protocols  -  reliability  or  performance; 
l )  load  balancing . 

The  background  to  ADDAM,  together  w i t h  n  description  of  the  network  on  which  it  runs, 
i  a  given  in  \  2  ]  . 

1.2  PARTITIONING  AND  REPLICATION 

I  hi*  iln  t  abase  I  ?*  divided  into  a  number  nf  partitions  (pages)  |l  igure  I  I;  a  set  of  pages 
is  allocated  for  t  tie  storuge  of  all  records  of  n  data  type.  Where  more  than  one  page 
is  allocated,  the  schema  identifies  a  partitioning  attribute  for  the  data  type,  together 
w  i  t  ti  thp  i  an  go  of  attribute  values  for  each  page  in  t  fie  net.  By  adopting  a  suitable 
replication  strategy,  t  lie  two  major  requirements  for  t  tie  distributed  dal  abase  m.innqri 
will  be  in  romp  |  i  shed  using  mutable  protocols  i.e. 

a)  survivability  of  data 

h  1  r||  ir tent  local  access  In  dal  a  subsets. 
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One  of  the  key  requirements  of  the  replicated  database  is  the  need  for  s ynchron i za t i on 
between  the  pages  holding  the  replicated  data.  This  is  achieved  in  ADDAM  by  using  a 
master/slave  arrangement.  At  any  moment,  one  of  the  replications  of  each  page  acts  as  a 
master  copy  and  the  remainder  act  as  slaves  [figure  2].  The  master  copy  of  the  page  is 
called  the  owner;  the  slave  copies  are  referred  to  as  subscriber  copies. 

An  owner  is  not  a  privileged  node  on  the  network;  ownership  of  a  particular  page  may 
change  from  time  to  time  as  the  processing  load  on  the  database  varies.  ADDAM  attempts  to 
transfer  ownership  to  the  node  making  most  use  of  the  page;  the  mechanism  for  deciding 

which  node  should  own  the  page  is  called  an  election.  In  general,  a  node  will  be  the 

owner  of  some  pages  and  a  subscriber  to  others  and  it  will  normally  only  have  copies 
of  a  subset  of  the  pages. 

Two  other  techniques  are  used  by  ADDAM  to  optimise  page  distribution  around  the  network: 

a)  On  each  node  ADDAM  attempts  to  localise  pages  required  for  sequential  access. 

b)  ADDAM  also  ensures  that  sufficient  copies  of  each  page  are  maintained  for 

survivability. 

1.3  CONTROL  PROTOCOLS 

The  database  is  maintained  internally  by  a  number  of  protocols  known  collectively  as  the 
control  protocols.  Their  purpose  is  to  maintain  synchronisation  and  consistency  among  the 
multiple  copies  of  the  database,  to  ensure  that  the  number  of  replications  required  for  each 
page  actually  exist  and  to  ensure  that  each  page  number  has  one,  and  only  one,  owner. 

Update  Protocols  -  Performance  and  Reliability 

ADDAM's  interfaces  queue  update  requests  to  maintain  single  threaded  user  access  on  each 
node.  The  unit  of  update,  the  segment,  is  chosen  to  allow  a  record  consisting  of  multiple 
segments  to  have  updates  applied  to  different  segments  concurrent  1 y . 

The  reliability  protocol  provides  a  reliable  mechanism  for  the  propagation  of  database 
changes  to  all  copies  of  the  relevant  pages.  It  is  used  to  support  a  number  of  application 
facilities  including  create  and  delete  record  and  the  reliability  option  of  update.  The 
reliability  protocol  has  a  handshake  between  originator  and  owner  and  between  owner  and 
subscriber.  The  reliability  protocol  also  channels  all  database  changes  through  the  owner 
in  order  to  achieve  concurrent  update  detection  and  prevention. 

ADDAM  avoids  "double  update'  problems  by  rejecting  reliability  updates  that  do  not  have 
the  latest  version  number  in  the  segment  header.  This  forces  the  application  program  to 
read  before  writing  and  to  retry  the  whole  transaction  if  a  failure  indication  is  returned 
by  ADDAM. 

The  performance  protocol  is  suitable  for  data  updates  that  are  both  independent  of  the 
previous  value  of  the  data,  and  are  applied  at  frequent  intervals.  This  protocol  dispenses 
with  the  handshakes  used  by  the  reliability  protocol  and  with  the  channelling  of  updates 
through  the  owner  at  a  cost  of  slightly  lower  reliability.  The  benefits  are  significantly 
reduced  highway  traffic,  shorter  protocol  path  lengths,  and  no  wait inq  for  acknowledgements. 

The  loss  of  a  node  may  result  in  the  loss  of  the  owner  nr  subscriber  copy  of  one  or  more 
pages  of  data.  A  loss  of  ownership  obstructs  the  passage  nf  the  reliability  protocol  which 
routes  updates  to  data  through  the  owner  and  thereafter  to  the  subscribers.  There  are 
regular  checks  made  by  AODAM  that  combine  subscriber  notification  to  the  owner  with 
monitoring  of  the  number  of  owners  that  exist  for  each  page.  If  the  number  of  owners  of  a 
page  is  zero,  an  election  is  held  between  all  subscribers,  In  elect  a  new  owner.  Bids  are 
made  on  behalf  of  each  subscriber  which  are  evaluated  in  each  copy  of  the  election 
program.  In  theory  all  subscribers  will  come  to  the  same  conclusion  about  which  copy  o t 
the  page  will  become  owner. 

In  practice  there  is  always  a  possibility  that  the  election  evaluation  program  in  one  oi 
more  nodes  (foes  not  receive  all  the  bids  and  chooses  owner*;  d  i  t  f  e  i  »'n  t  1  y  .  !h  is  ran  lead  t 
a  page  having  two  owners.  However,  dual  ownership  ran  hr  recognised  by  ADDAM  which  turret, 
another  ownership  election,  disowning  all  current  owners. 

If  a  subscriber  copy  is  lost,  bringing  the  number  of  copies  nf  a  page  below  a  schema- 
declared  minimum,  a  new  subscriber  in  selected  from  the  remaining  nudes,  The  owner 
broadcasts  a  "coerced  subscrihrr  regurnt  "  message.  This  s.igr  i  received  b\  all  nud- 
that  do  not  hold  a  copy  of  the  relevant  paqe.  Any  nod/'  I  frit  i  s  able  to  take  a  copy  of  tin 
page  sends  a  "subscriber  enrolment  offer"  message  to  t hr  owner.  Thu  owner  accepts  hnw*v<  i 
many  offers  it  requires,  and  rejects  t  tie  remainder.  The  nodes  whose  offers  are  accepted 
are  registered  jr»  ttie  subscriber  lmt,  and  ench  in  sent  r*  ropy  nt  t  lie  page,  These  ni  dr  • 
then  behave  like  normal  subscribers  and  commence  pa  r  t  n  i  p  t  i  mi  in  the  subscriber  and  .'mm  i 
monitorinq  protocol. 

If  a  node  should  fail  (fur  inq  t  tie  prngtesn  of  a  I  ran. am  I  mu  wh  1 1  h  il  has  originated,  t  h«- 
database  may  he  left  in  an  inconsistent  state.  There  air  twi  a.jM-r  t  to  be  runs  i  do  red : 

a)  f  r  ansae  t  i  on  recovery  -  dealt  w  .  t  h  in  Section  :* ; 

h)  resolution  of  rUruclunl  l  tu  unu  i  si  enc  l  cm  . 
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The  problems  associated  with  (b)  are  resolved  using  the  consistency  checking  protocol. 


I  SI  -1 


The  consistency  checking  protocol  runs  continually  as  a  background  task  on  all  nodes.  It 
checks  the  structure  of  the  database  to  ensure  that  it  remains  consistent.  For  example, 
for  each  index  entry  that  it  finds  it  will  check  that  the  relevant  data  record  actually 
exists.  Wherever  an  inconsistency  is  detected,  it  is  corrected.  In  the  above  example, 
the  index  entry  would  be  deleted  if  the  data  record  could  not  be  found. 

1.4  USER  INTERFACE 

To  the  user  the  whole  of  the  database  appears  to  be  resident  on  his  own  machine,  thus  the 
user  is  unaware  of  the  distributed  nature  of  the  database. 

The  user  interface  comprises  four  access  procedures: 


4) 

The  Reliability 

Interface 

b) 

The  Performance 

Interface 

c) 

Define  Logical 

View 

d) 

Read  Logical  Record 

Reliability  Interface 

This  interface  provides  the  following  features: 
a )  Create  a  data  record 

This  ADDAM  call  stores  the  data  record  in  the  appropriate  free  record  slot  in  the 
appropriate  page,  and  creates  any  necessary  index  entries. 

b J  Update  a  data  record 

Note  that  update  is  at  the  unit  of  the  segment .  The  update  of  a  whole  record  is 
achieved  as  a  series  of  separate  updates  to  the  segments  in  the  record.  Also  a 
segment  must  be  read,  the  images  updated,  then  the  update  command  issued,  for  the 
update  to  succeed. 

c )  Delete  a  data  record 

Any  index  entries  are  deleted,  along  with  the  data  record,  when  this  function  is 
executed  so  that  consistency  is  maintained. 

The  Performance  Interface 

d )  Update  a  data  record 

This  interface  is  used  by  application  programs  to  cause  a  segment  to  be  updated  as 
rapidly,  and  with  as  little  use  of  system  resources  as  possible.  There  is  no 
requirement  to  read  the  segment  before  updating  it.  There  is  no  reply  by  ADDAM  and 
thus  no  indication  to  the  user  of  success  or  failure. 

Define  logical  View 


This  interface  allows  a  user  to  define  a  subset  view  of  the  database.  A  user  can  specify 
a  sequence  in  which  a  group  of  records  should  be  retrieved  and  can  attempt  to  make  the 
retrieval  or  update  as  fast  as  possible  by  requesting  local  residency  of  data.  The 
following  commands  are  available: 

e )  Define  a  logical  view  before  reads 

Passing  qualifiers  to  the  record  name  of  interest  gives  two  benefits.  First  of  all, 
on  subsequent  reads  by  the  application,  only  those  records  that  meet  the  previously 
defined  'view'  are  returned  to  the  application.  Secondly,  the  local  ADDAM  will  try 
to  become  a  voluntary  subscriber  to  the  page  of  fnterest  when  the  logical  view  is 
defined,  so  that  read  operations  are  faster.  This  can  speed  up  the  processing  of 
both  the  get-next-record  type  of  operation,  and  reliability  updates  which  must  be 
preceded  by  reads. 

f )  Define  a  logical  view  before  updates 

This  feature  allows  the  application  to  request  local  copies  of  indexes  to  data 
records  which  are  to  be  updated  later. 

Read  Logical  Record 

The  read  function  supports  the  reading  of  a  single  segment,  up  to  in  bytes,  or  a  complete 
record  currently  up  to  450  bytes  in  si/e, 
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Read  data  records  sequentially 


Used  in  conjunction  with  the  definition  of  a  logical  view,  this  function  supports 
the  "get-next*1  operation.  Unwanted  records  are  filtered  out  by  ADDAM,  according  to 
the  'view'  selected. 


Read  a  data  record  by 


ADDAM  supports  a  selective  read,  with  the  user  specifying  the  record  name  and 
several  qualifiers  whose  values  allow  ADDAM  to  retrieve  only  that  record  which  fits 
the  criteria . 


2 .  MAINTENANCE  OF  CONSISTENT  DATA 

2.1  THE  RELIABILITY  PROTOCOL 

Early  versions  of  ADDAM  had  a  reliability  protocol  which,  though  ideal  for  the  simplest 
of  transactions,  was  always  seen  as  inadequate  for  updates  on  complex  data  structures.  Th 
protocol  avoids  the  requirement  to  lock  records  by  forcing  a  user  to  read  each  segment 
before  updating  it;  when  two  users  wish  to  update  the  same  segment,  the  first  to  present 
the  update  request  succeeds  and  the  other  must  read  the  segment  again  before  updating. 

This  protocol  has  now  been  redesigned  to  allow  the  user  to  define  long  transactions,  that 
is  multiple  database  operations  that  form  a  single  commit  unit.  Although  AODAM  does  not 
support  consistent  read  sets  (i.e.  reading  a  set  of  records  as  if  from  a  consistent  databas 
frozen  in  time),  the  new  protocol  ensures  that  the  duration  of  temporary  inconsistency  Jn 
the  database  is  minimal  and  allows  a  transaction  to  be  rolled  back  quickly  if  an  error  is 
detected . 


For  most  reliability  transactions,  ADDAM  recognises  three  phases:  the  distribution  phase, 
the  commit  phase  and  the  completion  phase  [Figure  3],  Where  two  transactions  are  runninq 
in  parallel  trying  to  update  the  same  segment,  the  first  transaction  to  reach  the  commit 
phase  succeeds  and  forces  the  other  to  be  aborted.  Ihese  phases  may  most  easily  bp 
explained  by  reference  to  an  example:  in  the  example  chosen  a  user  wishes  to  update  a 
segment  in  each  of  two  data  records  as  a  single  commit  unit. 

Distribution  Phase 

Firstly  the  user  calls  ADDAM  to  define  the  start  of  the  transaction  -  this  causes  ADDAM  to 
abandon  and  roll  back  any  transaction  initiated  by  the  user  but  not  completed.  ADDAM 
allocates  a  unique  ID  which  it  attaches  to  all  messages  fulfilling  t  tic  transaction.  the 
user  calls  ADDAM  a  second  time  presenting  the  update  to  the  first  record  segment. 

At  the  originating  node,  ADDAM  determines  from  the  schema  whether  the  update  to  a  data 
segment  could  have  implications  for  other  records  (e.g.  index  records):  it  is  possible 
that  the  segment  may  contain  a  secondary  key,  or  may  contain  the  partitioning  field  whose 
value  determines  on  which  page  the  data  record  is  stored.  In  either  case,  ADDAM  reads  the 
live  segment  and  compares  the  relevant  fields  in  the  live  segment  and  the  proposed 
update.  Having  determined  which  records  (and  which  pages)  arc  affected  by  the  update, 
ADDAM  decomposes  the  update  into  a  series  of  fragments,  each  of  which  is  an  update 
request  for  one  database  segment.  Each  fragment  is  broadcast  in  turn  to  the  node  which 
owns  the  page  in  question. 

On  the  owner  page,  a  preliminary  check  is  made  to  determine  whether  the  fragment  may 
proceed.  If  this  check  is  successful,  the  owner  node  stores  details  nf  the  fragment  and 
broadcasts  in  turn  to  all  nodes  which  subscribe  to  the  page.  Subscribers  reply  to  the 
owner  which  in  turn  replies  to  the  originator;  if  insufficient  subscriber  replies  are 
received  by  the  owner  then  this  is  reported  to  the  oriqinator  which  immediately  aban  s 
the  transaction,  broadcasting  a  "roll  back"  message  to  nil  nodes  and  replying  to  the  user. 
On  both  owner  and  subscriber  nodes,  the  fraqment  is  stored  in  m  temporary  buffer  until  the 
transaction  is  either  completed  nr  rolled  back.  ADDAM  replies  tn  t  tie  user  when  all 
fragments  have  been  distributed,  and  the  distribution  phase  is  repented  this  time  for  the 
update  to  the  second  seqment. 

Comm  it  Phase 


When  the  user  has  presented  all  parts  of  his  transaction  fnt  distribution,  he  calls  ADDAM 
to  commit  the  transaction  to  the  database.  In  the  commit  phase,  the  originator  sends  ;* 
single  broadcast  message  tn  nil  nodes.  for  each  fragment,  the  owner  node  verifies  that 
the  requested  change  may  he  made  successfully,  arid  of  this  stoge  searches  its  list  of 
transaction!;  in  t  lie  distribution  phase  to  roll  hack  any  whirh  will  t*e  caused  to  fail  by  t  »■ 
fragment  tie  i  fig  committed.  Once  t  tie  owner  has  committed  the  fragment,  it  broadcasts  to  t  h* 
subscribers  and  munis  their  replies.  The  ownet  replies  I  >  i  the  originator*  The  original 
cheeks  bark  replies  for  each  page  against  a  list  of  page:;  involved  in  the  transaction.  if 
owners  fail  to  leply  within  a  timeout  period  (e.g.  if  :»  new  owner  of  a  page  is  being 
elected),  t  tie  originator  broach  asto  t  fie  commit  message  ;u|' in  In  giw  “lost"  owners  a  .«  <  • 
charier  lu  reply.  It  a  successful  irply  has  been  received  from  ill  owners,  t  fieri  n  final 
rnmplet  ion  phase  begins. 
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I  ri  this  phase  the  owner  again  broadcasts  a  single  message  to  all  nodes,  tor  each  f  rammer, 
each  owner  node  makes  live  the  updated  segment,  copying  data  from  its  temporary  buMf-i-. 
to  the  data  page.  Each  owner  node  instructs  its  subscribers  to  follow  suit.  At  t h  1  s 
stage  the  transaction  is  irrevocable  but  each  participating  node  rip  lies  to  the  originate 
the  originator  waits  long  enough  to  receive  one  reply  b*  fore  itself  replying  'successful' 
to  the  user.  If  the  originator  does  not  receive  a  rep',  to  its  "complete”  message,  it 
retransmits  the  message.  If  still  no  reply  is  receive!  then  t he  nnfr  imp  of  the 
transaction  is  uncertain  and  the  originator  institute-,  consistency  restoration  *  see 
Section  2.2). 

If  after  some  timeout  period  a  node  finds  that  a  tr.'*-i  -action  is  committed  but  not 
completed  then  it  broadcasts  an  enquiry  to  other  node*  "What  happened  to  transaction  X  >  /  ' '* 
Any  node  which  has  received  either  a  "complete"  message  or  a  "roll  hack"  message  for  t  tie 
transaction  replies  to  the  uncertain  node  which  then  f  llows  suit;  if  no  reply  is  received 
then  the  uncertain  node  itself  broadcasts  a  message  to  roll  back  the  transaction  and  it 
rolls  it  beck  itself. 

This  protocol  is  expensive  in  terms  of  inter-node  messages  and  processing  within  ADDAM: 
this  expense  is  essential  where  the  transaction  affects  more  than  one  record  but  is 
unnecessary  in  the  majority  of  cases  where  an  update  to  a  single  segment  is  required.  I oi 
reliability  updates  to  a  segment  which  does  not  contain  a  secondary  key  or  a  partitioning 
field,  and  which  therefore  can  be  confined  to  a  single  update  fragment,  ADDAM  allows  a 
user  to  commence,  distribute  and  commit  the  transaction  in  a  single  call.  Within  ADDAM 
the  distribute  and  commit  phases  are  compressed.  The  originator  broadcasts  a  "complete" 
message  on  receipt  of  a  successful  reply  from  the  owner,  just  as  in  the  three  phase 
protocol  . 

The  ADDAM  reliability  protocol  gives  an  almost  perfect  guarantee  that  a  transaction  is 
consistently  committed  to  the  database  or  that  the  failure  is  reported  to  the  user.  th* 
only  circumstance  in  which  the  database  can  become  inconsistent  is  when  damage  occurs  to 
the  network  which  breaks  all  highways  or  destroys  nodes  such  that  all  copies  of  a  page 
are  lost:  even  in  this  remote  circumstance  ADDAM  is  capable  of  detecting  the 
inconsistency  and  restoring  the  database  to  a  sr 1 f -cons  1  stent  state,  though  this  may 
result  in  some  loss  of  data.  The  way  in  which  this  is  achieved  is  described  below. 

2.2  RESTORATION  OF  CONSISTENCY 

There  are  a  number  of  situations  in  which  it  is  reasonable  to  examine  whether  the  database 
has  become  inconsistent.  These  situations  are: 

a)  When  ADDAM  attempts  to  read  a  data  record  using  an  index  and  finds  that  the 
index  page  does  not  exist; 

b)  When  ADDAM  reads  an  index  record  and  finds  that  the  record  pointed  to  by  the 

index  contains  the  wrong  key  value;  ' 

c)  When  ADDAM  creates  a  data  record  on  an  existing  page  but  finds  that  no  pagr? 
exists  for  an  index  record  to  be  created; 

d)  When  highway  recombination  occurs  (see  Section  3). 

In  each  of  these  cases,  ADDAM  determines  from  the  schema  which  page  numbers  need  to  be 
ehecked,  and  institutes  for  each  suspect  page  a  consistency  restoration  procedure.  Tins 
involves: 

for  a  data  page  -  check  that  all  indexes  tn  each  record  exist; 

if  any  index  is  missing,  rrentp  it; 

for  a  prime  index  page  -  check  that  the  data  record  exists  cor  respond  i  rig 

to  each  index;  it  an  index  is  found  to  be  wrong, 
delete  it, 

2.3  MANDATORY  REL A  I  KJNSh IPS 

If  two  data  types  A  and  B  share  a  common  attribute  and  are  so  rloselv  related  that  a 
record  of  type  R  is  incomplete  without  a  matching  record  of  type  A,  then  there  is  said 
to  be  a  mandatory  relationship  between  A  and  B.  We  can  distinguish  two  sorts  ot 
mandatory  re  1  a t i onsbi p :  a  'loose'  relationship  in  whirh  an  unattached  type  B  record 
retains  some  significance  in  the  absence  of  an  associated  type  A  record;  and  a  'tight' 
re  1  a t i nnsh i p  in  which  an  unattached  type  B  record  is  nonsensical  and  indicates  corruption 
or  loss  of  part  of  the  database.  Appendix  A  give*;  r.nme  examples  of  mandatory 
re  1  at  i  onsh i ps . 

ADDAM  allows  the  database  designer  to  identify  pnrtirulni  i  e  I  at  i  nnsh  i  ps  nr.  mandatory, 
provided  that  for  any  type  B  record  there  can  r*  ud  only  one  matching  type  A  record. 

Where  n  mandatory  relationship  has  been  defined,  ADDAM  ptevent*.  a  type  M  record  from 
being  created  unless  the  corresponding  type  A  rec  ord  ran  he  found,  an<i  nut nmat i on  1  1 v  dr  let 
all  corresponding  type  ft  records  whenever  u  type  A  reooiif  is  ih-lrfed,  m  is  found  I  (  llf 
missing  dm  i  rig  consistency  checking. 
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5,  SELF -REGENERAT ION  AND  NETWORK  REPAIR 

3.1  INTRODUCTION 

As  already  described,  ADDAM  monitors  the  number  of  copies  of  each  page  and  maintains 
enough  copies  to  ensure  survivability  of  data.  Nodes  holding  subscriber  copies  of  a  page 
regularly  report  to  the  nude  which  is  owner  of  the  page,  and  the  acknowledgements  sent 
by  the  owner  are  received  by  ail  subscribers  so  that  each  is  aware  of  the  existence  of 
the  others.  If,  through  hardware  failure,  an  owner  node  fails  to  respond  to  a  subscriber, 
ADDAM  chooses  t bp  most  suitable  subscriber  to  become  owner  in  a  process  known  as  an 
election. 


In  a  configuration  with  a  single  highway  connecting  the  nodes,  ;j  break  in  the  highway 
results  in  two  part  highways  each  with  nodes  running  ADDAM  software:  two  separate 
databases  (consistent  within  themselves  but  not  between  themselves)  are  created  on  each 
side  of  the  break,  the  missing  owners  heing  recreated  by  the  election  process  and 
completely  missing  pages  by  the  consistency  restoration  process.  In  n  data  base  manager 
like  ADDAM  it  is  in  practice  not  possible  to  differentiate  between  the  situation  where 
the  highway  has  broken  and  the  situation  where  one  or  more  nodes  have  been  totally  lost  , 
because  each  node  "sees"  the  system  by  use  of  thp  highway.  Therefoie  the  break  in  the 
highway  means  that  users  on  each  half  will  continue  to  alter  data  so  that  "duplicate” 
pages  on  each  side  become  more  and  more  dissimilar  and  incono istrnt  with  each  other. 

Each  autonomous  ADDAM  database  sees  only  some  of  the  transactions  current  on  the  real- 
world  entities  represented  in  the  database. 

Although  great  importance  is  attached  to  consistency  and  survivability,  of  even  greater 
importance  is  that  the  system  should  be  available:  in  extreme  circumstances  some 

compromise  on  reliability  is  accepted  in  order  to  provide  a  continuing  service  to  users. 

Recent  studies  which  we  have  carried  out  have  considered  what  strategy  should  be  adopted 
when  a  break  in  the  highway  is  repaired  and  two  different  databases  recombine.  When  a 
user  updates  n  segment  through  ADDAM,  the  live  segment  is  replaced  in  its  entirety  by  the 
updated  segment.  Tins  restriction  enables  ADDAM  to  avoid  the  consistency  problems  posed 
by  concurrent  updating.  For  this  reason,  ADDAM  t r ansae t i oris  arc  in  general  not  commu t a t i y 
there  is  no  way  that  the  transactions  of  two  ADDAM  databases  could  he  rcsequenced  on 
recombination  to  properly  take  account  of  the  change?!  to  the  real-world  entities. 

On  recombination,  there  will  be  pages  for  which  there  are  two  candidate  surviving  owners, 
for  each  page,  one  owner  copy  will  continue  as  owner  and  the  distinctive  information  he] 
on  the  other  ropy  will  be  deleted.  In  order  to  choose  which  owner  must  survive  ADDAM  has 
to  consider  two  factors: 

a)  Which  owner  is  the  most  up-to-date  or  has  had  the  most  changes  made  to  it. 

b)  Which  owner  comes  from  the  same  half  of  the  network  as  other  related  owners. 

The  second  factor  is  more  important  even  than  the  first,  because  th*'  self  consistency  of 
the  surviving  database  relies  upon  it.  There  would  not  be  much  point  in  an  owner  copy  of 
a  data  page  from  one  half  of  the  network  surviving  together  with  a  related  index  page 
from  the  other  half. 


3.2  DATA  GROUP  NOTIFICATION 


The  problem  is  solved  in  the  following  way.  Tirstly,  it  is  recognised  that  many  record 
types  and  pages  are  mutually  dependent  and  form  a  natural  "data  ginup".  An  example  of  a 
data  group  might  be  the  following  records: 

vehicle  type  data  (mandatory) 

one  record  for  >  nch  type  of  vehicle  giving  grneial  details 
e.g.  endurance,  performance 


vehicle  occurrence  data 

one  record  for  each  vehirie  giving  individual  del  ails 
e.g.  callsign,  fuel  state,  weapon  state 

vehicle  occurrence  data  lias 

a  prime  index  on  key  vehicle  ID 
a  secondary  index  on  key  vehicle  type 


I  he  database  designer  defines  in  the  schema  a  data  ginup  fm  en<  h  iminl  type  and  .to 
i  independent  record  type  for  each  data  group  -  other  types  within  i  group  are  termed 
dependent  .  Secondly,  each  node  regularly  broadcasts  to  nttc’i  nudes  so  that  cacti  is 
aware  of  the  other  nodes  sharing  the  same  part  highway,  ami  tub  i  .aware  of  any  change 
in  the  nodes  with  whirl)  it  in  Jh  contact.  these  hi  nndra'.t  a  identity  the  nude:;  w  1  t  h  whi'l. 
the  sending  node  is  in  contact,  and  an  "alteration  t  ait  nr"  f  m  o.n  h  page  local  to  t  he 
sending  node.  Iho  alteration  factor  is  the  principal  inraio.  of  if*  «•  i  d  i  ng  between  two 
candidate  owner  copies:  if  drpendn  on  both  the  inimh*  r  of  i  |  I,  1  *  .  made  to  the  page  and  t< 
t  fie  number  of  records  stored.  Ihtrdlv  I  tie  hrondiust  ntrssnip  t  *  -  ■  -  *  i  \  ed  at  each  nude  ar» 
run  ted  by  data  group  so  that  t  tic  node  can  del  ermine  wlnthri  i-  .  nmliinot  inn  tins  Just 
occurred  and  ‘whether  any  pages  have  mult  iple  owners. 
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The  following  example  shows  how  the  data  group  monitoring  protocol  and  the  subscriber  and 
owner  monitoring  protocol  work  together  to  maintain  a  consistent  database.  In  the 
example,  the  network  consists  of  three  nodes  X,  \  and  /  and  recognises  two  data  groups 
A  (pages  ad  (independent),  a2)  and  B  (pages  b_1^  (independent',  b2,  b  3  )  .  The  following 
table  shows  the  distribution  of  pages  and  shows  which  ate  owner  and  subscriber  copies: 


node 

X 

Y 

i 

a  1  (  s  ) 

a  1  (  o  ) 

a2  ( s ) 

a  2  { o ) 

b  1  (  s  ) 

b  1  (  o  ) 

b2  ( s ) 

b2  ( o ) 

b  3  ( o ) 

b  3  (  s  ) 

Each  node  regularly  broadcasts  two  messages,  one  for  each  data  qr  >up.  tach  node 
six  messages  which  it  sorts  according  to  data  group.  In  case  a  break  in  the  highway 
occurs,  some  quantity  is  required  to  identify  the  part-highway  on  which  a  node  is 
located:  from  all  the  messages  received  a  node  selects  the  lowest  node  ID  which  acts  a:, 
a  crude  part-highway  ID  and  is  included  in  each  data  group  message  that  is  broadcast. 

The  data  group  messages  contain  the  following  information: 

data  group 
node  ID 

lowest  node  ID 

page  number  of  page  p 

flaq  set  if  page  p  is  owner  copy 

alteration  factor  of  page  p 

page  number  of  page  q 

flag  set  if  page  q  is  owner  copy 

alteration  factor  of  page  q 

etc 

The  following  problems  may  arise  on  the  network: 

Two  Owners 

Each  node  analyses  the  messages  received,  taking  one  group  at  a  time.  Initially  when  no 
break  occurs  in  the  highway,  all  nodes  agree  on  the  lowest  node  ID  and  it  can  be  seen  tv 
inspection  that  each  page  has  at  most  one  owner.  If  a  page  has  more  than  one  owner  than 
this  is  detected  and  quickly  corrected.  The  owner  with  the  greatest  alteration  factor  is 
chosen  to  survive  and  the  other  owner  is  deleted.  Node  ID  is  used  as  a  tie  breaker  so  that 
a  sole  survivor  may  always  be  chosen. 

A  Break  in  the  Highway 

This  situation  is  detected  as  part  of  the  subscriber  and  owner  monitoring  protocol 
(described  in  Section  1.3).  If  a  break  were  to  separate  X  and  V  in  one  half  from  7  in 
the  other,  then  the  following  changes  could  occur.  Firstly,  lone  subscriber  pages  elect 
themselves  owners,  and  new  subscribers  are  coerced  on  other  nodes.  The  new  page 
dist  ribut ion  is : 


a  t  (  n  ) 

al(s) 

al(o) 

a2  (  s  ) 

a2  (  o ) 

b  1  (  a  ) 

bl  (o) 

b2  (  s  ) 

b  2  (  o  ) 

b2  ( o ) 

b  3  ( o  ) 

b  J(s  ) 

b3  ( o ) 

The  database  on  X  and  Y  in  fact  survives  intact.  Initially  /  is  owner  of  the  independent 
page  al  and  the  dependent  pages  1>2  and  b3.  Consistency  restoration  then  decides  that 
there  is  no  value  in  preserving  b2  and  b3  without  the  independent  page  bl,  and  so  b2  ;u'.ri 
b3  are  deleted.  An  empty  page  a2  is  created  when  an  application  on  1  nerds  to  create  a 
new  record. 

Highway  Rernmb i nation 


Network  repair  is  detected  when  n  data  group  message  received  contains  a  lowest  node  ID 
different  to  that  recognised  by  the  receiving  node.  Again,  each  data  group  is  considered 
separately.  We  believe  that  the  alterations  made  to  the  data  group  are  more  significant 
than  the  updates  to  a  single  page.  The  problem  in  recovering  from  network  repair  is 
essentially  that  of  deriding,  for  each  datn  group,  which  pat t - h i ghway 1 s  pages  arc  to  he 
kept.  lo  preserve  self  consistency  on  recombination,  it  i s  essential  that  the  set  of  all 
pages  in  a  data  group  should  be  chosen  from  the  same  pa r t - h i ghway :  the  example  in  Appro! 
B  shows  why  this  is  the  case.  Having  identified  the  "befit"  part  -highway,  pages  (of  the 
given  data  group)  from  other  pa  r  t  -  h  i  qhway  a  must  he  deleted  because  m  genernl  them  i«  en 
way  of  detecting  or  resolving  anomnlten  between  pnges  from  different  par t -hi  ghway a . 
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If  a  recombination  of  the  network  is  detected  in  which  all  pages  of  the  independent  data 
type  within  a  group  occur  on  one  pa r t -h 1 ghway ,  then  pages  from  that  part-highway  are 
chosen  to  survive.  If  pages  of  the  independent  data  type  within  a  group  occur  on  more 
than  one  part -highway ,  then  the  average  alteration  factor  for  data  pages  is  calculated  for 
each  part -highway ,  each  page  number  being  counted  once  only  if  more  than  one  copy  is 
found:  the  pages  from  the  part-highway  with  the  greatest  alteration  factor  are  chosen  to 

survive.  If  the  alteration  factors  for  pages  in  our  example  are  as  follows; 


page 


node 

X  V  l 


a  1  (  4  ) 

a  1  v  2  ) 

a  1  ( 4  ) 

a  2  (  8  ) 

b  1  (  3  ) 

b  2  (  5  ) 

b  3  (  7  ) 

then  the  alteration  factor  (data  group  A)  for  part  XV  is  4,  the  alteration  factor  for 
part  2  is  5,  id  the  copies  of  al  and  a2  on  node  2  will  survive. 


In  the  following  further  example, 
joining  P,  Q  and  R  with  S  and  T. 
c2  (independent),  c3  and  c4.  The 
with  their  alteration  factors: 


the  network  conistinq  of  P,  Q,  R,  5  and  1  is  formed  L> 
Data  group  C  consists  uf  page  numbers  cl  ( i ndependen t  ' 
table  below  shows  the  distribution  of  pages  together 


page 


node 

P  Q  R  S  I 


rid) 

c  1  (  2  ) 

cl(S) 

c2(4) 

c  3  (  9  ) 

c2  ( 4 ) 

c4(9) 

c3iio: 

c4(8) 

If  the  highest  alteration  factor  is  counted  for  a  page  that  occurs  more  than  once  on  a 
part-highway  (owner  and  subscribers  may  not  be  synchronised) ,  then  the  alteration  factor 
(data  group  C)  for  part  PQR  is  (2  +  4  +  9)/3  =  b  and  for  part  ST  is  :'S  +  10  ♦  91/4  =  6. 
This  time,  copies  of  cl,  c3  and  c4  on  nodes  S  and  l  will  survive. 

We  conclude  that  when  network  repair  takes  place,  some  loss  of  data  is  inevitable  and 
that  the  strategy  described  above  minimises  the  consequences  of  that  loss. 

4.  CONCLUSION 

In  high  resilience  applications  we  believe  that  a  reliable  distributed  database  management 
system  is  vital  but  it  brings  with  it  significant  cost;;  in  terms  o f  computer  and  network 
usage.  Our  detailed  designs  show  that  this  cost  is  not  prohibitive,  and  we  believe  that 
the  pressure  for  greater  resilience  and  system  modularity  w i 1 1  demand  the  adoption  of 
distributed  data  management  techniques  throughout  military  real-time  networks. 
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DISTRIBUTION  PHASE 


Originator  broadcasts  individual  fragments  to  owners 
Each  owner  broadcasts  to  its  subscribers 
Subscribers  reply  to  their  owner 
Owners  and  subscribers  store  the  fragments 
Owners  reply  to  originator 

COMMIT  PHASE 


Originator  broadcasts  to  all  nodes 

Owner  nodes  roll  back  any  conflicting  transaction 

Each  owner  broadcasts  to  its  subscribers 

Subscribers  reply  to  their  owner 

Owners  reply  to  originator 

COMPLETION  PHASE 


Originator  broadcasts  to  all  nodes 
Owner  nodes  copy  fragments  into  database 
Each  owner  tells  its  subscribers  to  do  the  same 
Subscribers  reply  to  their  owner 

(owner  need  not  wait  for  them) 

Owners  reply  to  originator 

(originator  need  only  wait  for  one  reply) 

Figure  3  -  THE  RELIABILITY  PROTO f 0 [ 
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APPENDIX  A  Examples  of  Mandatory  Relationships 
E  x  amp  1 e  1 :  loose 


type  A  -  track  type: 

one  record  describing  attributes  of  objects  a  radar  can  detect 
(e.g.  DC-10,  Exocet  missile). 

type  B  -  radar  track: 

one  record  describing  details  of  object  detected  by  the  radar 
(i.e.  position,  height,  speed  and  type). 

Clearly  every  radar  track  should  have  an  associated  track  type  (even  if  only  "unknown1 
However  if  the  track  type  data  is  lost  (due  to  a  highway  break  for  example),  the  radar 
track  data  is  still  significant. 

Example  2:  tight 


type  A  -  job  description: 

one  record  describing  the  details  of  a  task  being  carried  out  by  members  of 
a  ship's  crew. 

type  B  -  crew  member  -  job: 

one  record  associating  a  crew  member  with  a  task. 

Clearly  it  is  meaningless  for  a  crew  member  to  be  doing  a  job  which  has  no  description 
(type  A  being  assumed  to  cover  such  items  as  "miscellaneous",  "sick"  etc),  and  the  record 
"crew  member  -  job"  is  of  no  value  if  the  "job  description"  data  is  unavailable. 


I 
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APPENDIX  B  Examples  of  Highway  Recombination 

type  A  -  track  data: 

one  record  for  each  object  detected  by  a  sensor. 

type  B  -  track-track  pairing  data: 

one  record  for  each  "pairing"  relationship  between  two  tracks. 

There  is  a  mandatory  relationship  between  record  types  A  and  B  -  a  pairing  record  is  just 
nonsense  if  either  of  the  paired  tracks  does  not  exist. 

Suppose  that  page  al  contains  records  of  type  A  and  page  a_2  contains  recoi  ds  of  type  B. 

A  break  occurs  in  "FRe  highway  so  that  each  part-highway  has  its  own  copy, of  pagec  al  on.: 
a2 . 

In  each  par t- h i ghway ,  new  track  records  are  created.  After  a  time,  track  records  with 
the  same  ID  in  the  two  par t- h i ghway s  point  to  different  objects.  In  one  part-highway 
track  99  is  paired  with  track  1;  in  the  other  part-highway  track  99  is  paired  with 
track  2. 

When  recombination  occurs,  the  wrong  tracks  will  appear  to  be  paired  unless  the  surviving 
owner  copies  of  pages  al  and  a2  are  chosen  from  the  same  par t - h i ghway . 


! 
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SIMULATION  -  A  TOOL  FOR  (  OST-FFFFXTIVF  SYSITMS 
DESIGN  AND  IJVF  TEST  RF.Dl  XTION 


by 

Roland  (iauggcl.  dipl.  Phys .. 
Missile  Di\ision 

Bodenseewerk  Geratcicchnik  Cnnhl  I 
Postfach  1  I  20 

D-7770  Obcrlingcn  Bodensee 
West  Cicrniany 


Taking  advanced  passive  infrared  guided  missiles  as  an  example  the  author  claims 
in  his  paper  that  missile  system  simulation  -  both  software  and  realtime  hardware- 
in-the-loop  including  background  -  is  a  valuable  tool  to  find  cost-effective  sys¬ 
tem  designs  and  also  to  drastically  reduce  costs  of  field  testing  and  live  firing 
trials.  The  author  comes  to  the  conclusion  that  the  development  of  complex  missile 
systems  becomes  questionable  from  a  cost  standpoint  if  the  majority  of  the  in¬ 
creased  test  efforts  for  this  type  of  missiles  is  not  substituted  by  missile  sys¬ 
tem  simulation. 

The  author  addresses  Bodenseewerk * s  missile  system  simulation  philosophy,  simu¬ 
lation  methods,  high  level  programming  language  and  the  interfaces  between  the 
involved  hardware  and  software.  An  in-depth  discussion  of  the  influence  of  sim¬ 
ulation  onto  the  flight  testing  requirements  of  missile  developments  and  the  re¬ 
sultant  cost  savings  conclude  this  paper. 


My  contribution  to  the  subject  of  'Cost-effective  Guidance  and  Control  Systems'  pertains 
primarily  to  missile  system  simulation  as  a  tool  for  cost-effective  system  design  and 
reduction  of  extensive  and  expensive  live  test  campaigns  and  not  to  a  low  cost  realiza¬ 
tion  or  production  of  a  specific  design. 

There  is  a  great  number  of  different  domains  of  application  for  guidance  and  control 
systems  implying  many  different  requirements.  I  would  like  to  concentrate  in  this  paper 
on  the  field  of  unmanned  weapon  systems  and  here  especially  on  tactical,  passive  IR  hom¬ 
ing  missiles.  The  guidance  and  control  problems  occurring  in  such  missiles  are  very  com¬ 
plex  and  the  extreme  requirements  to  be  met  stress  the  limits  of  physical  as  well  as  tech¬ 
nical  feasibility.  Some  of  these  requirements  such  as 

fire  and  forget 

-  multiple  target  discrimination 
low  miss  distance 
large  range 

require  autonomous  guidance,  at  least  in  the  terminal  flight  phase.  • 

Presently  available  homing  heads  are  governed  by  certain  physical  and  technical  limita¬ 
tions.  The  required  mission  ranges,  for  instance,  are  much  larger  than  today's  homing  hc.i.i 
acquisition  range  performance  above  all  in  adverse  background  conditions.  This  forces  us 
to  take  a  new  approach,  e.g.  by  introducing 

new  homing  heads  with  improved  performance 
that  implies  upgraded  intelligence 

and 

an  inertial  midcourse  guidance  phase. 

The  introduction  of  an  inertial  midcourse  guidance,  where  the  missile  receives  certa.n 
pre-launch  target  information  from  the  aircraft  and  navigates  inortially  until  seeker  lo'  k- 
on,  circumvents  homing  head  acquisition  range  limitations.  (Fig.  1)  For  long  missile 
flight  times  and/or  extreme  dynamic  engagement  conditions  an  updating  of  the  target  in¬ 
formation  would  be  necessary. 

It  is  obvious  that  the  introduction  of  midcourse  guidance  drives  the  complexity  and 
therefore  the  costs  up  instead  of  down.  There  is  also  very  little  potential  to  offset  Mi  •  - 
cost  increase  by  re-arranging  sensors  and  shifting  some  of  their  tasks  into  the  compute  i 
software.  Fig.  2  shows  an  example. 

In  the  conventional  approach  the  seeker  head  and  inert ’a]  reference  system  are  bat.  i;  .  * 
ly  two  separate  units.  The  inertial  package  is  used  only  unt  il  tin  seeker  head  has  ac¬ 
quired  the  target;  then  it  serves  as  a  sensor  package*  for  the  nut  rpi  1  *■  t  function.  Mu- 
seeker  head  itself  is  designed  as  a  gyro-stabilized  platform  thus,  i  ej  resenting  at.  an  . 
t  ion.  i  L  reference  system.  In  today's  possible  st  rapdown  approach  the  midcourse  and 
seekt  r  head  stabilization  are  done  with  a  single  inert  ini  lefeieici  system  usini  Key 
fixed  senseis.  Thus,  the  inertial  reference  system  1  -« part  of  tin  seeker  contra  1  ] 

and  retains  its  full  function  throughout  the  r-ntin  flight.  Tin.*  1  i  ne- ■  >f -s  ight  i  it.  i-  *  • 
mat  ion  required  for  /uid.ince,  which  in  the  convent  i  one  1  system  j  .  pj  ov  :  Jed  by  the  ...V.  * 
gyros,  is  onleululod  for  this  implement  a  t.  Ion . 

This  solution  allows  a  slight  leduction  .  >  t  pi  eduction  v*sts  us  a  i  •  nit  o|  the  j.  >• 

I  SI  ml  n  •  I  ol  •  eiiS'U  S  -ill"  I  ot  lie  I  Hit  ’eh.tllle.il  *’«  jn  i  |  -tin  1 1  I  .  « ’•  »!t '  I  d<  ■  t  .  i  J  .  I  .  •  «  •  I  »  1 . 1  >  t  I  a  .it.  1 

I  r.ll  l.'.eil  I  I  '  Hi  these  III.  Mr.titt  1  li<  ‘I  ■  ■  ■  t  I  H  ■  l  I  ■  1 J  •  Ml  I  I  I  I  • .  -I  1 1  ’ll  .t  •  .  Ill.jll  i  l  .  !  ■  •  1  t  Il.r.c  t  < 

Il'Uell  light  I  t  -,p.  .  •  t  M  e.l  I  |  .  HI*.  ,  I  t  - ;  1 1  l  t  1  1 1<  I  til  « '«  .||I|  -I  .1 1  e  1 1 1  pine  I  lie  l  e.  is  . 
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All  this  shows  that  such  measures  have  only  a  minor  effect  on  cost  and  this  effect  is 
even  less  significant  when  it  is  considered  that  the  costs  for  the  inertial  reference 
system  are  relatively  low  compared  to  the  increasing  homing  head  costs.  For  inertial  :  re¬ 
course  guidance  a  minimum  number  of  rate  gyros/free  gyros  and  accelerometers  are  always 
required,  independent  of  where  they  are  located. 

The  requirements  for 

maximum  target  acquisition  range  in  adverse 
background  and  IR  countermeasure  conditions 

multiple  target  discrimination 

lead  to  increased  complexity  and  costs  in  the  field  of  homing  head  signal  process!.-. j , 
particularly  as  the  homing  head  must  be  able  to  perforin  automatic  lock-on  in  flight  due 
to  its  limited  target  acquisition  range.  Homing  heads  of  the  present  generation  which  are 
mostly  equipped  with  mechanical  reticles  do  not  meet  these  requirements.  Imaging  homing 
heads,  however,  promise  the  potential  of  providing  a  solution.  Image  processing  impi  k-s 
the  necessity  to  use  complex  and  costly  signal  processing  electronics  combined  with  enor¬ 
mous  computing  capability.  Here  we  face  the  direct  conflict  between  the  requirement  of 
improved  performance  on  the  one  hand  and  cost  reduction  on  the  other  hand.  The  development 
of  these  advanced  missile  systems  requires  extreme  technical  and  testing  efforts  in  as  s.  : 
to  achieve  the  development  aim  at  all.  Particularly  the  testing  effort  will  be  an  order 
of  magnitude  higher  than  with  present  generation  IR  missiles. 

In  my  opinion  the  use  of  advanced  simulation  methods  and  facilities  relieves  the  situ¬ 
ation.  This  not  only  because  simulation  enables  the  successful  development  of  such  missile, 
systems  at  all,  but  also  because  it  actually  provides  the  adequate  means  for  design  opti¬ 
mization,  for  keeping  the  development  time  within  reasonable  limits  and  for  drastically 
reducing  the  expensive  test  phases  which  are  otherwise  necessary  during  development. 

As  it  was  discussed  in  detail  during  the  AGARD  National  Day  September  1983  in  Munich, 
two  types  of  missile  system  simulation  are  important  (  Fig.  3  ) 

1.  All  math  models  simulations 

2.  Hardware-in-the-loop  (HWIL)  simulations. 

In  today's  modern  missile  development  the  all  math  model  simulation  procedure  uses  a  pure¬ 
ly  digital  computational  approach.  In  digital  simulations  the  equations  are  numerically 
integrated  requiring  extremely  fast  computing  capability.  These  extremely  high  computing 
speeds  are  realized  by  using  not  only  one  large  digital  computer  but  an  entire  computer 
network  consisting  of  one  general-purpose  computer  and  several  special-purpose  processors 
attached  to  it.  This  multi-processor  system  allows  for  the  partitioning  of  an  overall 
simulation  program  into  separate  parts  where  each  of  these  complex  ant',  time  critical  sub¬ 
programs  is  assigned  to  one  of  the  high-speed  satellite  processors.  This  approach  provides 
engineers  the  chance  to  include  all  essential  guidance  loop  components,  missile  control 
and  target/background  representation,  programmed  on  a  physical  basis  including  detailol 
error  effects. 

HWIL  simulation  offers  the  advantage  that  the  hardware  replaces  the  model  equations 
allowing  to  test  individual  subsystems  under  closed  loop  conditions  so  that  the  math 
models  can  be  validated  under  realistic  operational  conditions.  In  a ' 1  those  cases  where 
the  exact  mathematical  description  of  the  physical  system  is  difficult  or  even  impossible 
the  HWIL  simulation  is  the  only  method.  The  hardware  is  represented  by  two  different  sub¬ 
system  categories:  analog  equipment  and  digital  computers.  These  hardware  components  are 
coupled  to  the  multiprocessor  system  and/or  general  purpose  computer  by  Interface  com¬ 
puters. 

The  simulation  tasks  to  be  performed  during  missile  development  are  listed  in  Fig.  4. 
The  successful  execution  of  these  tasks  requires  a  number  of  all-math  simulation  models 
as  well  as  HWIL  programs  of  different  levels  and  degrees  of  complexity  which  must  be  adap' 
ed  to  the  specific  problems.  The  functional  test  has  to  bo  performed  under  as  realist'!' 
conditions  as  are  possible  in  the  laboratory.  For  this  purpose  the  different  subsystems 
are  mounted  on  a  flight  motion  simulator  which  performs,  in  realtime,  all  rotational  ac¬ 
celeration;;  and  velocities  of  the  missile  according  to  the  operational  conditions. 

When  considering  non-decoyed  targets,  and  excluding  complex  target /background  situn-i'. 
the  comparison  with  live  firings  clearly  shows  that  the  all-math  and  HWIL  simulation  pie 
vides  an  accurate  description  of  the  measured  missile  behaviour.  Th"  mcasui  "d  values  •  i  i  • 
fer  from  the  simulated  values  by  less  than  lot;  tills  appl  ic  also  i  n  missiles  having  i 
sensitive  flight  behaviour  and  operating  under  extreme  initial  conditions.  The  critic  il 
problem  is  lo  provide  exact  target  representations  in-li*  :  :  j  tin  nit  Mode  of  natural 
background  scenario!;  and  artificial  decoys. 

The  targ  e  aid  background  representation  has,  Ics-es-  ,  been  :  ewiat  neglected  m  ‘  ! 
past.  It:,  importance  has  never  been  underestimate!  Ini  tl  (mg.  1  r!  iirti’i  istii's,  nil:; 
backij!  omul  and  artificial  decoys  can  vary  to  such  at:  ■(  iliai  a  i.  ilistm  icpte-.,  s'  t 

I  fin  fit  all  possible  rndibln.il  inns  in  almost  n"i  bs  n  ’•  .  In  the  It  Id  oi  passive  i  H  ,  s  i 

ed  missiles  n<  deuseeweik  i  ntr  odueed ,  some  t  line  ago,  a  s.  .  method  v;b  i  h  allows  a  much  : 

i  cn  I  1  s  a  ,  i  e  ,  1 1  j  j;,,.  si  mu  1  a  1  ion  of  t  a  rqet  /  bn.  -k  g  t  oimd ,  ■  I  .  ■  >  nude  i  iy  ua  ■  ?  -  •  con.i  1 1  i  on:. .  I  : 

sen!  ed  till  a  1 1 1 1 1  1  ng  11, e  AGAUb  Nai  ion.il  liny  dept  enb.  r  1  us  I  i  u  Munich. 
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When  using  this  high-performance  target/background  simulator  the  simplified  target  and 
seeker  head  models  shown  in  Fig.  5,  which  are  mainly  based  on  simple  transfer  functions 
and  approximate  functional  correlations,  can  be  replaced  by  detailed  models.  Since  the 
targets  and  the  background  are  represented  as  a  physical  model,  the  signal  processing  can 
be  described  in  a  physical  manner  as  well.  As  a  result  the  approximation  functions  are 
replaced  by  the  simulation  of  the  actual  process.  The  example  to  the  right  shows  a  mechan¬ 
ically  scanning  seeker  model  using  a  linear  array  detector. 

Only  a  simulation  technique  of  this  type  provides  the  capability  to  define  the  seeker 
target  acquisiton  characteristics  against  complex  backgrounds  and  to  generate  the  actual 
seeker  head  error  and/or  guidance  signals  over  the  entire  flight  phase  in  the  laboratory. 
It  also  provides  answers  to  our  questions  concerning  seeker  head  performance  when  acquir¬ 
ing  decoyed  targets  and  estimates  of  the  accuracy  of  the  aim  point  selection  during  the 
terminal  guidance  phase. 

The  seeker  output  signals  are  fed  into  the  6-DOF  simulation  model  and  used  in  both  the 
all-math  and  the  HWIL  simulations  in  order  to  answer  the  all  decisive  question  about  miss 
distance  (Fig.  6) .  In  order  to  perform  HWIL  simulations  both  the  target /background  simu¬ 
lator  as  well  as  the  seeker  head  signal  processing  must  be  run  in  realtime.  This  simula¬ 
tion  technique  is  the  only  method  to  develop,  test  and  optimize  the  signal  processing  al¬ 
gorithms  in  the  laboratory.  The  result  is  a  money  saving  effect  since  a  high  number  of 
expensive  flight  trials  are  no  longer  necessary  and  development  time  can  be  reduced  con¬ 
siderably. 

A  further  important  factor  for  cutting  down  on  development  cost  is  the  compatibility 
and  easy  handling  of  software  and  hardware  during  simulation.  The  entire  simulation  com¬ 
plex  basically  consists  of  a  conglomerate  of 

simulation  computers  (  general  purpose, 

process  control  computers) 

analog  and  digital  missile  assemblies 

peripheral  test  and  supply  equipment 

(flight  motion  simulator,  target  simulator, 
auxiliary  equipment) 

software/hardware  interfaces 

A  vital  element  is  the  simulation  language.  Experts  agree  that  the  use  of  a  high  level 
simulation  language  has  a  distinct  time  and  therefore  money  saving  effect  when  this  lan¬ 
guage  is  tailored  to  the  specific  missile  design  and  simulation  problems.  Since  there  is 
no  such  specifically  tailored  language  available  on  the  market  Bodenseewerk  has  developed 
its  own  language  which  is  called  BOSIM  80  and  which  drastically  improves  and  accelerates 
our  simulation. 

The  advantages  of  high  level  languages  for  the  numerical  integration  of  differential 
equation  systems  by  using  problem-oriented  instructions,  as  well  as  the  advantages  of 
easy  model  equation  notations  and  of  comfortable  input/output  and  sorting  routines  are 
generally  accepted.  Again,  details  have  been  discussed  during  the  above  mentioned  AGARD 
meeting  in  Munich. 

The  availability  of  language  instructions  for  easy  handling  of  missile  hardware  and 
periphery  is  the  decisive  factor. 

Let  me  now  say  a  few  words  about  Bodenseewerk 1 s  missile  simulation  philosophy,  a  loose¬ 
ly-coupled  multiple  processor  system  with  its  associated  peripheral  equipment  tailored  to 
the  particular  needs  of  missile  system  simulation  -  both  software  and  HWIL.  Missile 
hardware,  flight  simulators  and  support  equipment  arc  connected  to  a  computer  network  by 
a  software-controlled  crossbar  switch  bus  system,  allowing  any  combination  of  processors, 
peripherals  and  HWIL  equipment.  The  underlying  philosophy  for  this  type  of  network  is  that 
the  required  high  throughput  timesharing  environment  for  simulation  program  development 
and  the  high  speed  single  task  environment  for  HWIL  execution  could  hardly  be  realized 
on  a  single  computer  but  rather  would  require  at  least  three  different  computers.  (For 
program  development,  for  realtime  program  speed  optimization,  for  realtime  HWIL  execu¬ 
tion)  .  Satisfying  these  requirements  by  installing  separaLe  computers  would  cause 
serious  problems  in  data  exchange,  software  maintenance  and  software  configuration  con¬ 
trol  to  ensure  software  consistency  throughout  the  missile  division,  as  all  these  sepa¬ 
rate  computers  would  have  their  own  data  bases,  their  own  operation  systems,  languages 
and  libraries.  (  Fig.  7,  left  hand  side). 

A  better  solution  is  to  couple  special  computers  of  the  same  basic  type  using  the 
same  operating  systems,  identical  languages  and  accessing  a  common  data  bank  that  holds 
all  required  programs,  macros,  libiarics  and  data  nets.  (Fig.  7,  light  hand  side).  A 
benefit  of  that,  typo  of  network  is  that  there  no  longci  exists  a  potentially  error  pr  im 
information  flow  between  the  computers. 

In  order  to  match  the  specific  requirements  of  the  different  stages  of  simulation,  be¬ 
ginning  with  program  development  and  ending  with  the  HWIL  experiment,  the  computers  n  e  t 
have  special  different,  capabilities.  This  is  nocnrpl  i  died  by  o' Inching  slave  processor'  , 
thus  adding  the  requested  capab  i  I  1 1  tes  for  t  tie  different,  envn  *  iiim-nt  s .  Fig.  tt  shows  1  I 
functional  schematic  of  such  a  network,  consisting  of  network  piocessets  of  the  same  *\i  , 

attached  slave  processors  and  special  peripherals  lor  added  capablltt  ie«,  and  netw  et- 
for  terminal  and  disc  support  . 
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Seen  from  the  network's  point  of  view,  all  network  processors  still  are  of  the  same 
type,  allowing  easy  network  management.  Seen  from  the  users'  point  of  view,  there  are 
several  available  programming  environments  with  the  requested  specific  capabilities,  as 
all  users  can  access  all  processors  via  the  terminal  network,  all  processors  can  access 
all  discs  via  the  disc  network  and  all  users  can  demand  for  specific  slave  processors  and 
special  peripheral  equipment  via  the  software  controlled  crossbar  switch  system. 

Let  me  now  turn  to  the  final  issue  of  my  paper,  namely  to  the  influence  of  simulation 
on  missile  testing  (  Fig.  9  ).  The  development  of  a  missile  system  is  always  performed  to 
a  development  specification  which  in  turn  is  based  on  tactical  and  operational  requirements 
As  soon  as  hardware  of  complete  missiles  becomes  available  actual  firings  will  be  started 
in  order  to  evaluate  the  missile's  performance  against  the  development  specification. 
Several  different  test  phases  follow  each  other,  from  contractor  tests  to  operational  tests 
and  evaluation  done  by  the  official  services.  The  actual  performance  and  qualification 
proof  against  the  development  specification  by  missile  firings  is  one  of  the  key  activi¬ 
ties  during  development  in  order  to  demonstrate  the  successful  completion  of  development 
to  the  customer. 

The  problem  here  lies  with  the  complexity  and  diversification  of  scenarios  in  which  the 
missile  would  have  to  be  tested  in  order  to  demonstrate  its  overall  mission  performance. 

In  this  context  not  only  the  high  number  of  necessary  firings  and  the  related  high  costs 
for  the  missile  hardware  are  to  be  considered  but  also  the  technical  and  financial  efforts 
which  are  required  for  presenting  the  targets  in  many  different  tactical  scenarios.  In 
particular,  the  consideration  of  all  the  possible  different  background  conditions  as  well 
as  artificial  decoying  and  different  attack  formations  drive  costs  to  a  prohibitive  level. 


Therefore,  it  becomes  obvious  that  the  test  programs  have  to  be  tailored  in  such  a 
way  that  only  a  limited  number  of  selected  conditions  are  proven  by  actual  firings.  The 
performance  proof  using  missile  hardware  will  thus  refer  only  to  a  few  samples  out  of  the 
almost  unlimited  non-linear  operational  space.  For  cost  reasons  the  number  of  selected 
samples  can  never  be  as  high  as  necessary  in  order  to  provide  an  adequate  performance 
proof  for  the  customer.  Here  simulation  is  an  adequate  and  by  the  way  the  only  tool  to 
improve  the  situation. 

Parallel  to  the  missile  development  a  simulation  model  is  set  up  which  has  been  vali¬ 
dated  by  extensive  HWIL  tests  of  all  major  subsystems.  At  the  beginning  of  the  test  phases 
validated  all-math  and  HWIL  simulation  programs  should  be  available  describing  the  com¬ 
plete  missile.  As  already  detailed  before  a  target/background  simulator  is  required  in  ad¬ 
dition  to  the  missile  simulation  programs. 

When  testing  the  complete  missile  the  warhead  is  in  most  cases  replaced  by  a  telemetry 
package  which  transmits  the  main  functional  and  operational  data  of  the  missile  during 
the  mission.  These  telemetry  data  as  well  as  the  known  launch  and  target /background  condi¬ 
tions  are  used  for  validating  the  related  all-math  and  HWIL  simulation  results.  When  the 
main  missile  parameters,  functions  and  signal  flows  comply  with  the  results  of  the  live 
firings  within  a  certain  tolerance  range  the  missile  simulation  model  can  be  considered 
to  be  validated  and  can  thus  be  used  for  extensive  performance  calculations  for  the  dif¬ 
ferent  target/background  configurations.  The  actual  performance  proof  of  the  development 
specifications  and  the  operational  requirements  is  then  done  by  all-math  simulations  in 
the  laboratory.  This  is  a  much  more  cost-effective  means  of  performance  verification. 

To  summarize,  the  advanced  missile  system  simulation  represents  a  mighty  tool  for  money 
savings  during  the  course  of  complex  missile  development.  As  discussed  it  provides  adequate 
means  for  design  optimization  and  reduces  drastically  the  live  test  efforts.  As  far  as 
production  is  concerned  the  savings  effect  is  with  the  mechanization  of  an  optimal  design 
which  leads  to  a  minimum  of  hardware  and  test  time  with  respect  to  development  specifica¬ 
tion  compliance. 
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Figure  1  Midcourse  guidance 
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SEEKER  HERD  SO-lRS  SO* COMPUTER  GUIDANCE  ACTUATOR 


Figure  2  Keali/aiion  uiidcouiNC  guidance 
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Figure  3  Advanced  simulation  technics 
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DESCRIPTION  DU  PROCESSUS  D'ELABQRATIQN  DU  DIALOGUE 


"HOMME  MACHINE"  DANS  LES  AVIONS  D'ARMES  EQU1PE5  DE  TUBES  CATHOD1QUES 
ROLES  ET  DESCRIPTION  DES  MOYENS  DE  SIMULATION  PILOT  EE 

Monsieur  Pierre  HEL1E 

AVIONS  MARCEL  DASSAULT  -  BREGUFT  AVIATION 
70,  Quai  carnot  92214  SAINT  CLOUD 

FRANCE 


RESUME 


La  conception  du  poste  d'Aquipage  des  avions  d'armes  actuels  et  futurs  est  soumise  b  diffArents 
types  de  contraintes  quM  est  possible  de  rAsumer  comme  suit  : 

-  Objectifs  de  realisation  (charge  de  travail,  fiabilitA,  sAcuritA  ...) 

-  Contraintes  de  realisation  (cahier  des  charges,  avionnage,  ...) 

-  Etat  de  la  technologie  de  commandes  et  visualisations 

L'analyse  de  ces  contraintes  et  les  developpements  technologiques  en  cours  autorisent  b  predirc 
sans  trap  de  risques  que  les  avions  d'armes  du  futur  proche  auront  une  planche  de  bord  equipee  integralement  de  tubes 
cathodigues  (ou  de  systbmes  permettant  des  presentations  equivalentes),  associAs  b  quelques  instruments  conventionnels 
pour  1'ultime  secours,  et  un  systfeme  de  commandes  constitue  entre  autres  de  commandes  b  labels  variables  reparties  sur 
les  ecrans,  de  commandes  physiques  multiplexees  implantees  sur  Manche  et  Manette  et  d'un  systfcme  de  dialogue  vocal. 

Au  niveau  des  ingAnieurs  charges  de  l'Atude  du  dialogue  "Homme-Machine"  1'apparition  de  re~> 
nouvelles  techniques  a  provoque  la  necessite  d'une  part  de  remettro  en  cause  les  principes  etablis  (par  exemple 
suppression  des  instruments  conventionnels,  utilisation  du  HUD  comme  instrument  principal  de  pilotage)  et  d'autre  part 
de  dAvelopper  de  nouvelles  mAthodes  de  travail  car  il  n'e3t  plus  possible  de  procAder  par  petits  pas  b  partir  de  In 
realisation  prAcAdente  (multiplexage  et  juxtaposition  des  informations,  optimisation  des  presentations  aux  phases  de  In 
mission)  chaque  poste  Atant  optimist  pour  un  avion  donnA. 

Les  AMD.BA,  pour  rApondre  b  ces  besoins,  au  vu  de  leur  experience  sur  les  avions  actual1* 
(militaires  et  civils)  et  dans  le  cadre  deludes  de  poste*  d'Aquipaqe  futurs  nnt  mis  au  point  un  canevatdes  tdches  et 
documents  k  rAaliser  permettant  aux  responsables  d'identifier  les  diffArentes  Stapes  du  rfAveloppement  et  d'effectuer 
quand  il  est  encore  temps  les  rebouclages  entre  les  diffArentes  parties  en  presence  (bureau  cfAtude,  Aquipementirr, 
utilisaleur). 


L'erj3emble  des  documents  et  tflehes  a  rAaliser  pruvent  se  decomposer  en  : 

-  documents  de  definition 

-  documents  liAs  6  la  realisation 

-  tAches  de  validation  liAes  &  la  definition  et  b  la  realisation. 

En  re  qui  concerne  1 'elaboration  du  dialogue  "Homme  Mac  him*"  In  present  exposA  no  s'lnt  Are  , 
qu'mix  documents  et  aux  LAchan  liAes  f»  In  dAflnltlon. 
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La  suite  de  (a  presentation  m  propose  de  d^tailler  chacun  des  documents  ci  r^aliser  (objectif, 
content!  et  moyens)  et  de  presenter  pour  lea  tdches  de  validation,  les  moyena  mis  en  oeuvre  pour  les  rSaliser  ainsi  que  les 
difterentes  utilisations  possibles  de  ces  moyens. 


DOCUMENTS  A  REAL1SER 


Document  ’’Modes  et  Commandes" 


Objectif  du  document 


L'objectif  principal  de  ce  document  dont  la  realisation  suit  immedialement  la  phase  avant  projet 
est  de  foumir  &  l'utilisateur  de  I'avion  (client,  essais  en  vol)  une  enveloppe  des  possibilites  du  "syst&me  avionique"  de 
1 'avion.  En  retombee  il  doit  permettre  de  fixer  au  concepteur  un  cadre  de  travail  pour  l'eiaboration  du  dialogue  homme- 
machine. 


Ce  document  est  le  fruit  d’un  travail  collectif  auquel  participent  les  differents  specialistes 
concern^  (Materiel,  Fonctionnel,  Utilisateur). 

Contenu 


d'autre  part. 


Le  "Modes  et  Commandes"  comporte  deux  parties  orientees  "Materiel"  d'une  part  et  "Fonctionnel" 


La  partie  "Materiel"  presente  tous  les  equipements  ou  syst6mes  "fonctionnels"  du  systfeme 
avionique  ;  ces  syst&mes  "fonctionnels"  sont  essentiellement  des  capteurs  qui  peuvent  poss6der  divers  modes  de 
fonctionnement  chacun  de  ceux-ci  pouvant  fttre  utilises  par  une  fonction  du  systfeme  avionique  ;  ce  seront  par  exemple  le 
radar,  la  ou  les  centrales  &  inertie,  les  capteurs  optroniques  ... 

Pour  chacun  de  ces  systfemes  le  document  presente  une  description  physique  de  l'equipement,  de 
ses  modes  de  fonctionnement  et  de  ses  commandes  apecifiques. 

Les  equipements  d'interface  (commandes  et  visualisations)  font  egalement  l'objet  d'une  description 
physique  permettant  d'evaiuer  leurs  capacites  globales  (par  ex.  modes  de  balayages,  nombre  de  couleurs,  champs  pour  les 
visualisations). 


La  partie  "Fonctionnel"  du  document  9e  decompose  elle-m6me  en  deux  sous-ensembles  : 

-  le  premier  de  ces  sous-ensembles  presente  une  philosophie  generalc  d'utilisation  de  la  cabine  par  I'intermediaire 
des  systfeines  de  commandes  et  de  visualisations,  i{  comprend  une  description  g^ntfrsle  applicable  dans  tous  les 
modes  des  principes  de  dialogue  homme-machine. 

11  decrit  : 

.  les  principes  d'affectation  des  commandes  "manches  et  manettes" 

.  les  principes  de  dialogue  &  partir  des  diff6rents  sysl&men  dispnnihlos  (mmmnnde  vocale,  clavier  multi 
fonction,  6crans)  ;  pour  les  4crans  il  pr^sente  des  rfegles  qdni*rnlcs  d'utilisation  (definition  de  zones, 
affectation  de  ces  zones,  ...) 

.  des  descriptions  pr^senlont  la  philosophie  de  presentation  dm  pannen  cl  nlnrmes. 

-  Le  second  sous-ensomble  est  une  presentation  de  haut  niveau  des  diff  fronts  modes  de  fonctionnement  du 
syst&me  avionique. 

Thecun  des  modes  de  fonctionnement  du  syst&me  avionique  oat  decrit  par  ; 


I 


.  le  moyen  d'appel  du  mode  et  de  ses  6ventuels  soua-modes 
•  les  principals  commandea  et  actions  possibles 

.  J'sffectation  des  visualisations  comprenant  pour  chacune  d'elle  le  type  et  r6num£ration  des  informations 
presentees 

.  les  moyena  de  sortie  du  mode 

Enfin  ce  second  sous-ensemble  dresse  sous  forme  de  tableau  ou  chronogramme  un  recapitulate  de3 
different*  modes,  de  leur  priorit^s  respectives,  des  compatibility,  et  des  diff^rente3  transitions  possibles  entre  modes  el 
commandos  correspondantes. 

Moyens 


Ce  sont  essentieilement  (outre  le  crayon  et  la  gomme)  des  moyens  humains  qui  sont  mis  en  oeuvre 
pour  la  redaction  de  ce  document. 

Document  de  "Specifications  Globales" 

Chacun  des  modes  ou  des  sous-modes  de  fonctionnement  mis  en  Evidence  par  le  document  “Modes 
et  Commandea"  fait  J'dbjet  d’un  document  de  "Spy ifi cations  Globales". 

Objectif 


L'objectif  de  chacun  de  ces  documents  est  ft  partir  du  cadre  de  travail  foumi  par  le  document 
Modes  et  Commandea  de  faire  une  description  dans  le  detail  des  commandes  et  visualisations  associ6es  aux  differentes 
fonctions  op^rationnelles  actives  dans  ces  modes.  Le  document  est  realise  par  des  sp^cialistes  fonctions. 

Bien  entendu  compte  tenu  de  1'activation  simultan^e  de  plusieurs  fonctions  operationnelles  un 
"juge  de  paix"  systfcme  arbitre  lea  eventuels  conflits  et  priority. 

Contenu 


Ce  document  pr6sente  dans  le  cadre  d'un  fonctionnement  normal  du  systfcme  (procedures 
convent ionne lies,  bon  fonctionnement  des  equipements  necessaires  ft  la  fonction)  une  description  precise  et  exhaustive  de 
I'ensemble  des  actions  equipages  et  des  visualisations  associees  ft  la  fonction  en  objet. 

Ce  document  est  en  fait,  en  finale,  le  "Manuel  Pilote"  de  la  fonction  decrite. 


Moyens 


Compte  tenu  du  caract&re  du  document  de  Specification  Globale,  de  ('utilisation  generalisee  des 
tubes  cathodique9  et  de  la  forme  repetitive  de  certaines  visualisations,  il  a  ete  ressenti  un  besoin  d'aide  eu  concepteur 
base  9ur  un  systftme  informat ique  et  grapbique. 

Le  materiel  utilise  aux  AMD.BA  pour  ce  besoin  est  un  systfeme  actuellement  en  place  pour 
repondre  k  d'autrea  besoins  (synoptiques  systfemes,  cdblages  eiectriques,  editions  de  documents).  Les  principaux  avantaqe'j 
de  ce  sy st  erne  sont  : 

-  ses  capacites  intrinsfeques 
.  mernis  de  symbol ea 

.  nppel  ou  suppression  des  fonds  graphiques 
.  rhoix  dYrhelle 
.  "hard  ropy" 

-  le  Irnvnil  our  errnn  rnlfxidlqne  (monochrone  el  evontuolloineht  rnulrur)  do  fngon  ft  pliiri’t  le  concepteur  dims  un 
envlroimnncnl  "represent nl if”  des  tubes  preoenls  sur  1'nvion 

-  nrrbivmie  et  edit  Ion  rins  visualisations 
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TACHES  DE  VALIDATION  -  SIMULATIONS  PM-OTEES 


Le  paragraph©  precedent  a  present e  les  documents  k  rlsiiser  pour  ddfinir  l'utiliaation  de  i'avion 
aaaocid  k  son  system©  aviontqoe,  bion  que  n'6tant  pas  rentrtf  dans  le  detail  ds  chacune  des  fonctions  11  ne  fait  aucun  doute 
sur  la  complexity  de  ces  fonctions  at  sur  la  difficulty  de  rdaliser  la  validation  des  specifications  k  parti r  dVin  seui 
document  aussi  bien  fait  soit-il. 

H  convient  dgaiement  de  prendre  en  compte  k  ce  niveau  des  contraintes  de  temps  et  d'argent  pour 
srriver  k  la  conclusion  sur  ia  necessity  d'effectuer  juste  avant  la  realisation  (c’est-fc-dire  redaction  des  specifications 
detainees  et  realisation  du  logiciel)  une  validation  de  ces  specifications  pour,  autant  que  possible,  limiter  les  essais  au  sol 
ou  an  vol  avec  les  materials  reels  b  des  contrdles  de  la  realisation  et  non  pas  des  specifications  ;  c'est  tout  naturellement 
•que  les  AMD.BA  ont  ete  conduits  k  la  mise  en  oeuvre  de  simulation  de  syst^mes  en  temps  reels  permettant  d'une  part 
d*etudier  {'aspect  commandos  et  visualisations  et  d'autre  part  de  valider  certains  algorithmes  complexes  de  guidage  ou 
autres.  Ce  systbme  OASIS  operationnel  actuellement  aux  AMD.BA  a  et6  developpe  pour  le  Mirage  2000  et  est  adapts 
pour  tous  lea  nouveaux  aviona  en  developpement  (militaires  et  civils). 

Configuration  du  systfeme 

Le  system©  OASIS  a  ete  congu  avec  le  double  objectif,  d'une  grande  souplesse  d'utilisation 
permettant  de  s’adapter  k  des  travaux  de  type  etude  (qui  exigent  facility  et  rapidite  dans  la  realisation  de  modifications) 
et  d'etre  economique  tant  dans  sa  realisation  que  dans  son  exploitation. 

Ce  double  objectif  a  conduit  &  concevoir  un  systfeme  rdalisant  une  simulation  complete  des 
equipement8  et  du  systeme.  De  m#me  les  interfaces  physiques  homme-nnachine  sont  realis6es  avec  cet  objectif  et  ne  sont 
done  pas  ndeesaeirement  les  interfaces  de  I’avion  etudid.  Compte  tenu  de  la  tendance  £  [a  disparition  des  postes  de 
commandes  specifiques  les  soucis  de  representative  des  interfaces  devrait  s'effacer  dans  le  proche  avenir. 

La  simulation  est  realis6e  k  partir  de  3  ensembles  comprenant  : 

-  un  ordinateur  avec  aes  pdripheriques  qui  regoit  les  informations  provenan*  des  actions  du  pilote  effectue  les 
caiculs  de  simulation  de  I'avion  au  SNA  et  gbre  le  systfeme  graphique 

-  un  systfeme  graphique  qui  k  partir  des  messages  provenant  de  Tordinateur  trace  In  symbologie  sur  un  tube 
cathodique 

-  une  console  pilote  qui  supporte  le  systfeme  graphique  et  regroupe  les  differenles  commandes  de  mise  en  oeuvre 
du  system©  y  compris  cellea  presentees  sur  le  manche  et  la  manelle  des  qaz. 

Description  du  systfeme  OASIS 

Le  systeme  OASIS  est  d’une  part  compose  d’un  ensemble  materiel  et  d'autre  part  d'un  ensemble  de 
togicieis  specifiques  developpds  pour  les  besoins  de  cette  simulation. 

Le  materiel 


Le  calculateur  et  ses  peripherjgues 

Le  calculateur  utilise  est  un  ordinateur  32  bits  him  adapt e  pour  Icr>  operations  temps  reel.  Pnl 
essentie Uement  cette  caracteristique,  assoc i£e  k  l'experience  d'utilisation  de  »  otto  mm-hine  pour  le  traitement  dr\ 
donnees  d’essais  cri  vol,  qui  a  guide  le  choix  vers  ce  systeme. 

11  possfede  deux  unites  centrale  CPlJ  et  11*1)  dont  one,  lo  (  »’iJ,  r-.t  afferttSe  au  traitement  ■!•  ; 
entrees/sorties.  Cette  architecture  permet  dans  certaines  applient ions  qnurrrmrvW's  hi  temps  do  calcul  de  ddrooler 
morceaux  de  programme  en  parallfele  dans  chacune  des  unites  centrales  ct  don<  d  q  iqnrr  on  temps  de  cycle. 
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Le  calculateur  possfcde  les  p^riph^riques  suivants  : 

-  I'ensemble  de  visualisation 

-  la  console  pilote 

-  une  unite  de  disque  BO  Mega  octets 

-  6  consoles  dont  une  console  syst&me 

-  une  units  de  handes  magnStique  45  IPS,  800/1600  BPl 

-  une  imprimante 

-  1  traceur 

Le  systSme  de  visualisation 


Le  syst&me  de  visualisation  est  constituS  d’une  units  graphique  dont  les  interfaces  sont  adaptSes  h 
IHjtiliMtion  de  plusieurs  types  de  terminaux  de  visualisation  : 

*  Tube  cathodique  monochrome  et  balayage  cavalier 

-  Tube  cathodique  couieur  &  penetration  et  balayage  cavalier 

-  Tubes  catbodiques  couieur  shadow  Mask  et  balayage  cavalier  (tubes  utilises  sur  avions). 

Pour  couvrir  les  be9oins  de  plus  en  plus  nombreux  en  visualisation  de  type  television  une  etude 
(^adaptation  d»j  syst^me  est  en  cours,  pour  {’instant  des  artifices  sont  utilises. 

L'emploi  de  I'un  ou  1'autre  des  terminaux  est  determine  par  les  besoins  propres  au  type  dp 
l'application  r^alis^e,  parmi  les  critferes  de  choix  citons  t 

-  le  besoin  en  representative  du  trace  (couieur,  qualite  du  graphisme) 

-  la  dynamique  de  Timage 

-  la  charge  de  calcul  globale 

-  qualites  propres  des  differents  terminaux 

Des  artifices  materiels  et  logiciels  penneltent  d'asnircr  pour  chacun  de  ces  couplager,  u'-c 
represcntativite  suffisante  pour  les  besoins  de  l'etude. 
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La  console  pilote 

C'est  1'organe  de  dialogue  de  1'op^rateur  (pilote,  ing£nieur)  avec  la  simulation.  La  machine 
actuellement  en  service  est  representative  des  commandes  du  Mirage  2000  et  comprend  les  organes  suivants  : 

-  le  manche  :  celui-ci  reproduit  exactement,  du  point  de  vue  de  ta  place  des  commandes,  le  manche  do  Mirage 
2000  ;  les  efforts  a  exercer  sont  eux  aussi  conformes  b  la  realite 

-  la  manette  des  gaz  :  de  mftme  que  le  manche  pilote,  celle-ci  reproduit  la  manette  du  Mirage  2000. 

Les  autres  organes  de  dialogue  n'ont  pas  la  pretention  de  representer  exactement  la  realite  ;  ils 
sont  cependent  suffisamment  realistes  pour  que  le  pilote  s’y  retrouve  ;  la  console  comprend  : 

-  un  PCR  (Poste  de  Commande  Radar)  presantant  les  principales  selections  : 

.  arret,  prechauffage,  silence,  emission 
.  changement  d1 6c  he  lie 
.  PP1 / B 

.  angle  de  balayage 
.  no  mb  re  de  lignes 

.  P5IC  /  PSIO  (poursuite  sur  information  continue  ou  discontinue) 

-  un  PCA  (Poste  de  Commande  Armement)  permettant  de  faire  et  visualiser  les  differentes  preselections  et 
selections  correspondent  aux  differentes  missions 

-  un  Poste  de  Commande  Navigation  (PCN)  permettant  par  exemple  d'inlroduire  de  nouveaux  buts  de  navigation, 
de  changer  de  but  de  navigation,  de  connaTtre  ia  position  de  ('avion,  de  faire  un  recalage  de  la  navigation 

*  un  bandeau  comportant  : 

.  les  commandes  de  sortie  et  de  rentree  du  train  d'atterrissage 

.  les  selections  des  divers  modes  du  pilote  automatique,  b  savoir  tenue  de  route,  tenue  de  cap,  de  pente  ... 

-  une  9erie  de  clefs  ingenieur  permettant  b  un  instructeur  eventuel  : 

.  de  simuler  des  pannes 

.  de  modifier  certains  parsmbtres  :  mettre  du  vent  lateral,  longitudinal,  des  turbulences  ... 

.  de  changer  certains  types  de  visualisations  :  par  exemple,  on  peut  pr£ferer  voir,  au  lieu  du  cerclc 
representant  les  limites  du  champ  viseur  tftte,  le  dessin  de  la  glace  semi  refiechissante  sur  laquelle  est 
projetee  la  symbologie 

.  de  suspendre  la  simulation  en  arrfttant  les  integrations,  de  l'acceierer  dan3  certaines  phases  peu  interessantes 
.  d'initiaiiser  ou  de  reinitialiser  le  systbme  dans  di verses  configurations  :  differentes  altitudes,  differentes 
vitesses,  differentes  positions  gbographiques  ;  ceci  permet  de  se  mettre  en  situation  pour  faire  rapidemenl 
certaines  missions  par  exemple,  pour  faire  une  epproche,  I'avion  est  initialise  6  1300  pieds  d'allitude. 

ces  clefs  peuvent  egalement  permettre,  lorsqu  il  s’agit  de  mettre  au  point  des  systbmes,  de  choisir  differents 
dessins  de  reticules,  differents  gains  ... 


-  des  potentiomfetres  servant  par  exemple  k  r£gler  la  force  du  vent,  k  changer  sa  direction... 


Le  loqiciel 
-  Structure  qlobale 


La  fonction  remplie  par  le  logiciel  au  niveau  du  syslbme  DASIS  er>t  double  :  il  s'agit  d'une  part  1 
trailer  les  signaux  provenant  de  la  console  pilote  et  d'autre  part  de  faire  tourner  le  programme  de  simulation  prnpremri. 
dit.  Ces  d-'ux  laches  sont  r£alis£es  par  deux  programmes  : 

-  programme  d’acquisition  (ACQ) 

-  programme  de  simulation  (ELSSAI) 


Ces  deux  programmes  Lravaillent  en  sequence  et  s'6changent  des  informations  par  I'inLcrmfrliaire  d'une  zone  m^rm  ir 
accessible  aux  deux  programmes. 

Le  programme  dr  simulation 


Le  but  du  programme  de  simulation  par  lui-m^me  »  M  de  sunnier  le  mrnportement  de  Lav  ion  et 
rtfponses  aux  difftfrentes  commandes. 


Conlrairement  au  programme  d'arquisitiom  qui  er'  r •'* ■  * ! i u en  ASM  MFU.F't  JK,  retie  parti*'  *'r 
rdalis^e  k  90  %  en  I  OK T KAN,  pour  des  raisons  £videntes  de  rnnintenabilit ■<. 

Llle  peut  ae  decomposer  en  deux  parties  : 

-  1  pnrlie  temps  diff^rd  qui  effectuc  cerlaines  initialisntions  (chard'*  p-«r  exemple  drs  tableaux  nvec  les  v ;«!*'•  ’■ 
des  sinin  et  cosinus  de  deqrtf  en  deqr£  ;  relte  tabulation  pcrrnel  fie  g  in  t  per  la  sudn  en  temps  de  eyr|n', 
him  sur  plan  colruls  que  sur  le  plan  des  visualisations 

-  1  partie  temps  rdcl,  qui  boucle  const  nmmpnt  sur  elle-m^rne. 
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La  base  de  la  simulation  est  le  modfele  avion  : 


Conditions _ 

Actions  pilote 

Attitude  j — 

et  paramfitres 

de  vol  &  t  , 
n-1 


MOOELE 

AVION 


Attitude  et 
parambtre  de 
vol  b  t 

n 


Le  modfele  utilise  h  ce  jour  est  relativement  simple,  et,  malgrfi  des  simplifications  destinies  b 
amfiliorer  le  temps  de  cycle,  il  donne  satisfaction  dans  I'ensemble  aux  pilotes.  Ce  module  est  bien  fividemment  appelfi  b 
tous  lea  cycles  de  calcul. 

Les  nombreuses  fonction3  difffirentes  du  systfeme  d'armes  ont  conduit  b  scinder  la  simulation  en 
plusieurs  parties  (cas  du  Mirage  2000 ) : 

-  les  macrofonctions 

-  la  gfinfiration  des  symboles  tfite  haute 
*  la  gfinfiration  des  symboles  tfite  basse 

-  le  logiciel  graphique 

Remarque  :  pour  les  applications  possfidant  plusieurs  visualisations  tfites  basses  il  y  a  une  partie  gfinfiration  de  symbole 
par  visualisation. 

Les  macrofonctions 


Elies  simulent  difffirentes  fonctions  du  systfeme  s 

-  macrofonction  pilotage 

-  macrofonction  navigation 

-  macrofonction  radar 

-  macrofonctions  Air-Sol  (une  macrofonction  par  type  d'arme) 

-  macrofonctions  Air-Air  (une  macrofonciton  par  type  d’arme) 

La  structure  d'une  macrofonction  est  du  type  suivant  : 


.  INITIALISATIONS  (temps  dif  ffirfi) 

.  INTERFACE  D’ENTREE 

.  LOG1QUES 

.  CALCULS 

.  INTERFACE  DE  SORTIE 


Cheque  macrofonction  est  appelfie  b  cheque  cycle,  cl,  mjivnnt  guVIle  est  concern  fie  ou  pns  (p-n 
exernplo  on  prut  avoir  ou  pas  un  emport  de  type  Air/Sol,  ni  uni  la  function  Air-r»ol  correspondante  peut  fit  re  nun 


- -  iv  muiunnitHM 


prftsftlectfte,  prftseiectfte  ...)  elle  gftre  sa  prop™  configuration  de  commando  at  effectue  les  calculs,  logiquet  de  mode  et 
da  presence-absence  da  rftticulea  correspondant  ft  l'fttat  du  systftme. 


Cheque  macrofonction  eat  independents  dea  autret  macrofonctions,  cartainea  aont  activftes  en 
permanence,  d'autrea  ne  le  aont  qu'en  fonction  dea  commandea  rftalisftes  par  I'opftrateur.  Les  logiquea  d'activation,  images 
dea  prioritfta,  dea  exclusivitfts,  selection,  preselection  aont  consignees  dans  dea  mots  de  contrflle. 

Generation  de  aymbole  tftte  haute  : 

Cette  gdndration  de  aymbole  tftte  haute  joue  en  groa  le  rOle  du  B.G.S.  (Bottier  Gftnftrateur  de 
Symbola)  implantft  aur  i'avion. 

C'eat  elie  qui  aaeure  le  daaain  dea  reticules  du  H.U.D.  (tftte  haute). 


reticules. 


Ce  sous  programme  eat  done  une  suite  de  traces,  scindfts  en  sous  parties  correspondent  aux  divers 


11  assure  une  autre  fonction  du  B.G.S.  qui  eat  cells  du  catcul  dea  limitations  :  certains  reticules  ne 
peuvent  dlsparattre  du  champ  viaeur,  et  aont  done  "limitfts",  la  plupart  du  temps  circulairement,  au  cercle  et 
reprftsentant  le  champ  du  viaeur  tftte  haute. 

Ce  sous  programme  eat  parfaitement  decouple  (ou  du  moins  le  plus  possible)  des  diffftrents  calculs 
effectufts  dans  les  diverses  macrofonctions.  Pour  la  definition  de  cheque  reticule,  il  n'y  a  done  qu'un  positionnement,  les 
divers  paramfttres  permettant  de  le  tracer  (par  example  le  routis  commande  dans  le  cas  d'un  ordre  en  roulis),  et  un  bit  de 
presence-absence. 

Trace  des  reticules 


Chaque  reticule  est  represente  en  memoirs  par  un  certain  nombre  de  mots.  En  fonction  des  bits  de 
presence  absence  ces  mots  sont  transfftrfts  en  mftmoire  de  visualisation. 

Certains  reticules  prftsentent  la  particularitft  de  ne  pas  changer  de  dessin  et  de  rester 
constamment  parallftles  ft  eux-mftmes  ;  il  est  inutile,  et  pftnalisant  pour  le  temps  de  cycle,  de  retransferer  dans  ce  cas 
I'intftgraUte  du  dessin  ;  leur  description  est  effectufte  une  foia  pour  toutes  en  initialisation. 

Generation  de  svmbole  tftte  basse 

Elle  assure  le  traeft  du  scope  tftte  basse  (HDD)  suivant  un  mode  de  fonctionnement  sensiblement 
identique  ft  la  tftte  haute  (certains  reticules  sont  (failleurs  identiques  en  tftte  haute  et  en  tftte  basse). 

Elle  comporte  de  plus  en  clfitura  1'envoi  du  buffer  contenant  les  codes  de  visualisation  vers  I'unitP 

de  treitement. 


Les  limitations  sont  ici  "carrftes",  done  plus  simples. 


dts*4#K*-*NfWNM4/\U' 
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Synthbae  qdndrale  de  la  structure  du  programme  de  simulation 


Tempt 
dif f drd 


Temps 

Rdel 


Le 


•  la  gestion  de  la  mdmoire  de  visualisation 
-  let  fonctions  graphiques  dldmentaires. 

La  gestion  de  la  mdmoire  de  vituelitation 

La  mdmoire  de  visualisation  ett  gdrde  b  partir  des  informations  ddfinissant  let  prdsences-absences 
dot  rdticulea  at  let  fraquences  de  rafrafchittement. 

Let  fonctiona  graphiques  dldmentaires 

Let  matdrielt  du  type  de  ceux  utilitas  torn  pour  la  plupart  livrds  avec  un  logiciel  de  base 
permanent  de  raaliter  let  fonctiona  dldmentaires  de  tract  des  vecteurs,  de  po3ilionnement,  de  treed  de  chafnes  de 
caractbres,  de  denotement  ... 

Cependant,  an  ce  qui  conceme  cet  matdriels,  ce  logiciel  de  base  ne  rdpond  pat  b  ce  qui  lui  est 
demandd  dan3  le  cadre  temps  rdel,  car  il  a  4t<  congu  dant  un  esprit  de  Conception  Assislde  par  Ordinateur,  oti  le  temps 
de  cycle  ett  un  facteur  beaucoup  moina  prdponddrant.  II  comporte  done  beaucoup  de  tests  suppldmentaires  de  cohdrence, 
de  contrftle  de  ddbordement  dcran,  ...  ,  toutee  chotet  qui  font  que,  lorsque  I'on  appelie  les  sous  programmes  concemas, 
let  chronot  t'en  ressentent  (cet  dldments  aont  an  effet  appeldt  piusieurs  centaines  de  fois  par  cycle). 

Ce  logiciel  de  bate  a  did  rdaliad  apdclflquement  pour  cello  application,  el  contitte  en  fait 
b  remplir  un  tableau  avec  les  mots  coddt  que  doit  recavoir  I'unltd  de  traltement,  et  h  gdrer  1'index  du  buffer. 

Le  fait  de  gdrer  toi-mdme  le  logiciel  de  base  prdsente  de  plus  un  autre  Intdrdt  i  blen  que  les  mots 
b  envoyer  eux  divers  syaldmet  qraphiquet  soient  dlffdrentt,  il  a  did  possible  de  rdaliser  des  sous  programmes  identique9 
du  point  de  vue  entrdea/aortiea  et  traltement  pour  let  deux  unitds  graphiques  utilisdes  b  re  jour.  II  auffit  alort,  suivanl 
celle  que  I'on  utilise,  de  tpdeifier  b  I'ddlteur  de  lient  la  librairle  qu'll  doit  uliliser. 


.  CALL  M.  ACTIV  CC.ACQ')  (activation  programme  d'acquisitions) 

.  Exdcution  tdte  haute  en  temps  diffdrd  (remplissage  mdmoire  de  visualisation) 

.  Exdcution  tdte  baste  en  tempt  diffdrd  (remplissage  mdmoire  de  visualisation) 

.  Conditions  initiates 

.  Initialisation  parambtre  avion  (partie  tempt  diffdrd  du  modble  avion) 

.  Initialisations  diverses  (remplissage  de  tableaux  par  exemple) 

.  Exdcution  temps  diffdrd  det  macrofonctiont  (initialisation  des  calculs  de  baiistique  par  exemple) 
.  CALL  M.  RSUM  CC.ACQ') 

:r - 

.  « 

.  Appel  modble  avion 
.  Appel  macro  fonctions 
.  Appel  tdte  haute 
.  Appel  tdte  baste 
.  GALL  M.  RSUM  CC.ACQ') 

.  GO  TO  ■ 

»  ■  _ - 

logiciel  qraphique  de  base 

Le  logiciel  assure  les  tdches  tuivantes  : 


IV  QJOnOOMdjH 


UTILISATION  DU  SVSTEME 


Ce  syst&me  est  actuellement  utilise  pour  rAaliser  la  validation  du  dialogue  "Homme-Machine’'  des 
avions  d*armes  b  partir  des  specifications  global©*  de  chacune  des  fonctions  des  systfemes  en  dgveloppement. 

11  permet  : 

-  la  mise  au  point  des  procedures  de  dialogue 

-  {'optimisation  de  la  symbologie  (forme  de  reticules,  positions) 

-  i'etude  d’algorithmes  de  guidage. 

L'experience  acquise  lors  de  sa  mise  en  oeuvre  a  conduit  b  envisager  et  &  realiser  d'autres  types  de 

t  Aches. 

-  Utilisation  pour  Tavionique  civile 

L'apparition  des  EFIS  (Electronic  Flight  Instruments  Systeme)  et  des  FMS  (Flight  Management 
Systeme)  sur  les  avion*  civile  a  fait  reseentir  un  besoin  similaire  A  celui  des  avions  d'armes. 

Le  systAme  OASIS  a  ete  adapte  b  ce  besoin  et  est  utilise  actuellement  pour  la  definition  des 
symbologies  EADI,  EHSI,  MFD  des  EFIS  des  avions  cfaffaire  FALCON,  des  tubes  avions  sont  utilises  pour  cette  tSches 
(voir  Photos). 

L’etude  du  dialogue  avec  un  FMS  est  en  cours  d'etude  avec  ce  systfeme. 

L ‘utilisation  de  ce  syst&me  dans  le  cadre  d'un  processus  de  certification  est  Agalement  envisage 
permettant  ainsi  de  limiter  le  nombre  de  vols  consacrAs  b  la  certification  de  la  symbologie. 

-  Utilisation  pour  1'instruction 

Du  fait  de  sa  representative  au  niveau  logique  systbme,  les  utilisateurs  de  1'avion  correspondant 
peuvent  b  i’aide  de  ce  system©  recevoir  une  formation  initiale  permettant  : 

-  de  limiter  le  nombre  de  vols 

-  de  valoriser  1'instruction  par  rapport  b  la  lecture  d'un  manuel  pilote 

-  d'instruire  simultanement  plusieurs  utilisateurs. 

-  Utilisation  £>our_la  confectioned©  manuels  gi]ot_e 

L'adjonction  d'un  traceur  sur  un  tel  systeme  permet  une  application  e  la  confection  des  manuels 
pilote  pour  lesquels  il  est  ndeessaire  de  faire  des  planches  reprAsentant  les  diffdrentes  visualisations  dans  les  phases  des 
diverse*  missions. 

II  est  possible,  grAce  au  syst&me  OASIS  de  dArouler  ces  missions  puis  de  figer  la  situation  ft  un 

instant  donn£,  re  qui  permet  de  tirer  les  planches  sur  le  traceur  b  intervalles  r^guliers,  ou  encore  aux  moments  "clef"  dr 

la  mission,  et  de  reconstituer  ainsi  les  diffArentes  phases  sur  le  papier. 

IJn  autre  avantaqe  b  cette  mAthode  est  d'Atre  sOr  que  los  diffdrnnts  parnmAtres  reprAsentAs  srrnnt 

corrAlAs  at  coherent*. 

-  ytHiaetion  pour la  ■pAcific5li°2  dAtalllAa  deji^mboJ^ogie 

I  'utilisation  du  systAme  dans  son  rdle  do  vnlldation  de  spAclfi  cations  globules  const  it  ue  la  drrnibm 

Atape  svsnt  In  pirns©  de  redaction  des  spArifications  dAtalllAes  de  symbologie  conduisnnt  h  It  realisation  du  loqirirl.  Pu 
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fait  de  la  rapresentativitd  du  fichier  des  reticules  cakil-cl  peut  ktre  utilise  pour  dditer  les  specifications  de  symbologie  f> 
I'll  do  du  tracaur. 


Las  specifications  aeront  alors  conforms  k  ce  qui  aura  dtd  valid*. 


CONCLUSION 


L'expdrience  scquise  dans  ('application  du  processus  d'dlaboration  du  dialogue  "Homme-Machine” 
ddcrit  anparavant  s'dtend  maintenant  aux  differentia  versions  da  Mirage  2000  et  prouve  tous  les  jours  la  bien  fond*  de  la 
methods  at  des  moyens  employes  ;  cecl  a  conduit  k  la  genera  User  h  toutes  les  etudes  de  ce  type  en  cours  actuellement 
(ACX,  etudes  generates). 

En  ce  qui  conceme  le  systkme  OASIS,  sa  souplesse  cTutilisation,  son  potential  (revolution  et  la 
divarsite  des  tkches  qu'il  permet  de  realisar  allies  k  un  invertissement  initial  moddrd  font  de  ce  systkme  un  outil  au 
rapport  coOt/efficacitd  trks  appreciable. 

Bien  antendu  le  proceaaus  et  las  moyens  ddcrits  ne  sauraient  rdsoudre  tous  les  problkmes  lids  b  la 
mise  au  point  d'un  SNA.  En  particulier  tous  las  problkmea  posda  par  l'avionnage  et  I'intdgration  des  dquipements 
(rdalisation,  interfaces)  ne  sauraient  dtre  rdsolus  par  le  systkme  OASIS  et  ndcessi teront  d'autres  1  Aches  telles  que  essais 
sur  banc  (fintdgration  stimulabtes  ou  essais  sur  avion  au  sol  ou  on  vol  et  essais  sur  de  gros  simulateura. 
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TERRAINFOLLOWING  WITHOUT  USE  OF  FORWARO  LOOKING  SENSORS 
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Summary 

A  system  is  presented  which  allows  an  aircraft  to  follow  a  preplanned  vertical  profile  along  a  planned 
route.  Using  a  simple  representation  of  the  planned  vertical  profile  instead  of  terrain  data  the 
computational  tasks  to  be  performed  in  the  aircraft  in  real  time  are  minimized.  This  system  may  ease 
some  operational  problems  of  todays  military  aircraft  when  flying  in  hostile  environment  until  the 
advent  of  more  sophisticated  systems  likely  to  be  based  or,  the  intelligent  combination  of  forward 
looking  sensor  data  and  "stored  map"  derived  information. 

Introduction: 

The  advances  in  defence  weaponry,  such  as  radar-laid  anti-aircraft-artillery  and  surface  to  air  missiles, 
have  greatly  complicated  the  task  of  todays  attack  aircraft. 

In  order  to  maximise  the  chances  of  survival  in  this  environment,  military  aircraft  are  using  terrain¬ 
following  radars  in  connection  with  suitable  processors  and  flight-directcr  or  autopilot  to  provide  low 
flying  capability  under  all  weather  conditions. 

Problem: 

The  disadvantage  of  these  systems  is  the  considerable  effort  required  to  achieve  a  reasonable  jamming 
resistance  with  respect  to  the  known  countermeasures  and  ir  addition  the  forward  radiation  may  ease  the 
task  of  hostile  intelligence. 

These  problems  may  be  overcome  by  using  "stored  maps"  in  connection  with  associated  sensors  and 
sophisticated  digital  processing.  Various  systems  are  known,  which  are  operational  for  missiles  and  in 
advanced  experimental  stages  for  manned  aircraft. 

Common  tc  these  two  systems  is  the  fact  that  they  are  associated  with  fairly  high  costs  and  require 
considerable  time  for  integration  and  testing. 

Solution  (or  rather  a  small  contribution): 

We  have  implemented  in  existing  operational  aircraft  a  system,  which  within  a  restricted  envelope, 
offers  the  facility  to  fly  low  over  undulating  or  hilly  terrain  without  forward  or  no  radiation  at  all 
along  a  preplanned  track. 

This  feature  is  complementary  to  the  existing  terrain  following  system. 

The  basic  principle  of  this  system  is  very  simple: 

A  planned  vertical  profile  is  stored  in  the  mission  computer  as  a  series  of  altitude  varlues  as  a  function 
of  downrange  from  an  Initial  Point. 

This  series  of  points  is  interpolated  with  a  suitable  funtion  thus  generating  a  demanded  altitude  as  a 
function  of  downrange  which  is  provided  by  the  A/C  navigation  system,  (see  fig.  1) 

The  difference  between  this  demanded  and  the  A/C  inertial  altitude  (updated  shortly  before  or  at  the 
Initial  Point)  basically  governs  a  flight  director  which  is  used  to  fly  the  A/C  at  the  planned  altitude 
along  a  planned  track. 

retails  of  the  implemented  system  are: 

The  system  altitude  used  in  the  vertical  flight  director  calculations  is  for  safety  reasons  the  smaller 
(i.e.  the  safer)  one  of  different  sources. 

If  switched  on  the  Radaraltimeter  has  a  monitoring  function  providing  a  pull  up  demand  in  case  of 
undershooting  a  preset  groundclearance. 

The  interpolation  between  the  downrange/altitude  points  is  done  using  a  cosine  function. 

The  tasks  to  be  performed  in  the  mission-planning  phase  are: 

1.  Generation  of  the  desired  f 1 ightprof i le.  This  can  be  done  in  two  ways  which  are  not  exclusive: 

1.1  Plot  terrain  profile  along  planned  track  using  e.g.  mip  data  (allowance'  must  he  made  for  an 
across  track  navigation  error  of  the  system)  ami  draw  a  desired  flight  profile  allowing  for 
boundary  conditions  (vertical  accel leratlon,  location  of  potentially  known  threats) 

or: 

1.2  If  a  DRMLS  (Digital  Radar  Land  Miss)  based  simulation  system  is  available  (e.g.  in  a  Tactical 
Flight  Simulator)  a  "flight"  can  be  performed  using  the  simulated  Tl  Ruhr  sydem  and/or  manual 
elevation  steering  under  "visual  conditions".  Recordirg  height  and  downrange  <  an  provide  a 
desired  prof  1 le. 

2.  Approximation  of  the  desired  profile  by  a  series  of  points  which  are  connected  !y  cosine  fundi  -os. 
(interval  (I  -  360  deg)  To  generate  a  good  approxlm.it ion  for  hilly  terrain  will  nut  require  moi- 
than  3  tn  1  points  per  10  nm  al  most. 
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3.  Verification  of  the  data  set  by  constructing  the  desired  vertical  flightpath  from  the  downrange/ 
altitude  table  using  the  interpolation  function  and  checking  against  the  available  terrain  data. 

When  making  up  the  planned  altitude  profile  the  different  error  sources  which  dictate  the  minimum 
achievable  groundclearance  (rtnin)  must  be  considered.  The  main  contributions  are: 

D alt  error  of  altitude  sensor  (after  updating) 

for  air  data  stabilized  sensors  this  will  be  increasing  with  downrange. 

Dbse  error  inherent  in  data  base  used.  These  may  be  maps  or  a  DRLMS  database. 

Piler  Pilots  error  for  following  a  flight-director  demand 
Ohor  Horizontal  Navigation  error  along  track 

These  quantities  may  be  related  to  Main  by  the  following  formula: 

Hnin>0alt  +  Dbse  +  Piler  +  C*Dhor*Dhor 


where : 


C=  0.5*bn/(v*v) 

bn:  maximum  vertical  accel leration 
v  :  ground speed 

As  the  contributions  of  the  different  errors  are  largely  independent  the  sum  on  the  right  hand  side  may 
be  replaced  by  the  "root  sum  square"  of  the  corresponding  N-sigma  quantities. 

The  implementation  is  using  about  300  words  of  the  A/C  mission  computer  and  the  altitude /downrange  data 
are  loaded  in  the  mission-computer  in  the  same  way  as  other  mission  data. 

This  small  amount  of  core  required  is  due  to  the  fact  that  not  a  terrain  but  a  desired  fi ightprofi le 

is  stored.  The  calculations,  which  in  a  terrain  following  radar  system  are  performed  inflight,  in 

our  case  are  practically  performed  on  ground  in  the  flight  planning  phase. 

Limitations : 


The  system  can  obviously  only  be  used  when  a  preplanned  track  is  adhered  to. 

This  implies  a  fairly  accurate  navigationsystem  which  in  our  case  was  available. 

Unknown  man  made  obstacles  present  the  same  problems  as  with  'stored  map’  based  systems. 

The  other  prerequisites  for  a  simple  implementation  which  were  also  available  are: 

Availability  of  interface  with  mission  computer  to  'fill  in'  the  planned  altitude  profile. 
Interface  between  navigation  system  .the  mission  computer  and  a  display  to  provide  the  pilot  with 
lateral  and  vertical  steering  information. 

Results: 


Evaluation  of  flightdata  shows  that  the  performance  of  this  system  is  as  expected. 

Fig.  2  shows  2  'flight  profiles'  over  a  terrain  profile  resulting  from  simulator  trials. 

The  upper  one  was  generated  using  the  terrain  following  radar  and  automatic  elevation  control. 
The  second  one  was  'flown'  using  the  'stored  profile'  approximated  by  8  points  and  using  manual 
elevation  control . 

Figures  2  and  4  show  recorded  flight  data  (planned  and  actually  flown  profile) 

Conclusion: 


The  design  and  implementation  of  such  a  system  can  be  done  without  technical  risk  and  on  an 
economic  basis,  filling  a  gap  between  systems  available  today  and  those  planned  to  be  available 
in  some  years. 

The  system  will  provide  a  capability  to  minimize  the  jamming,  detection  and  vulnerability  of 
military  aircraft  when  penetrating  hostile  environment  at  low  level  without  the  use  of  radiating 
sensors. 
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Fig.  2  Simulation  data 


Flown  Height 
Planned  Height 


fi'l.  1/4  Flight  fpd  data 
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THE  USE  OF  PRESSURE  SENSING  TAPS  ON  THE  AIRCRAFT  WING  AS  SENSOR  FOR  FLIGHT  CONTROL  SYSTEMS 
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For  the  low  speed  operation  of  aircraft,  during  STOL-take  off  or  STOL-landing  and  for  windshear 
situations  a  precise  measurement  of  the  state  of  the  aerodynamic  flow  is  required.  Normally  the  dynamic 
pressure  is  used  to  assess  the  state  of  flow,  thus  defining  the  stall  margin  in  terms  of  a  speed  factor. 
However,  flying  at  higher  lift  coefficients,  a  precise  maintainance  of  a  given  lift  coefficient  by  con¬ 
trolling  the  speed  is  no  longer  feasible.  Instead,  controlling  the  angle  of  attack  or  controlling  the 
lift  coefficient  directly  shoud  be  used. 

Some  methods  for  the  measurement  and  the  control  of  the  state  of  the  aerodynamical  flow  including 
wing  tap  pressure  measurements  are  discussed.  Wind  tunnel  results  are  presented,  that  show  the  pressure 
distribution  of  a  slotted  STOL-wing  and  the  typical  relationship  between  the  tap  pressure,  angle  of  attack 
and  flap  angle.  Wing  tap  pressure  mf  surements  taken  with  the  STOL-aircraft  Do  38  are  then  discussed 
showing  the  feasibility  of  the  methoo  described  to  sense  the  state  of  flow. 


INTRODUCTION 

To  maintain  a  safe  stall  margin  for  the  low  speed  operation  of  aircraft  a  precise  information  about 
the  state  of  the  aerodynamic  flow  is  required.  Normally,  during  landing  approach  this  safe  stall  margin 
is  defined  by  an  approach  speed  which  is  1.3  times  the  stall  speed.  However  for  STOL-aircraft,  during 
wind  shear  situations  and  for  the  maneuvering  flight  of  modern  combat  aircraft  the  speed  information  is  no 
longer  sufficient  for  the  determination  of  the  state  of  the  aerodynamic  flow.  Instead,  methods  controll¬ 
ing  the  angle  of  attack  or  the  lift  coefficient  directly,  should  be  used. 


DETERMINATION  OF  THE  AEROOYNAMIC  STATE  OF  FLOW 

During  stationary  flight  and  near  stationary  flight  in  a  pullup  maneuver  the  lift  L  is  equal  to: 

<X>  L=n-W 

where  W  is  the  weight,  n  the  loadfactor  and  *  the  bank  angle.  With  W*  as  the  apparent  weight 

(2)  W*  *  — - _ 

'  '  n  .  cos* 

and  the  lift  as  the  product  of  the  dynamic  pressure  q,  the  wing  area  S  and  the  lift  coefficient  cL: 

(3)  L  =  q  .  S  .  c. 


we  get  as  long  as  L  equals  W* 


W* 

5-  ■  1  •  CL 

,  .  w*  1 
CL  *  -T-  •  ~ 


Substituting  the  dynamic  pressure  by: 


we  get: 


„  W*  2  1 

CL  =  T  •  —  ■  "v? 


If  we  look  at  the  change  in  the  lift  coefficient  with  the  change  of  speed  we  find/1/: 


Assuming  that  a  pilot  or  an  autothrottle  system  is  able  to  hold  the  approach  speed  within  +  5  kts 
«  2,5  m/s,  at  an  approach  speed  of  140  kts  =  70  m/s  and  a  wingloading  factor  W/S  of  3  600  N/m2  a  variation 
in  lift  coeffitient  of  about  0,2  due  to  a  speed  variation  of  ♦  5  kts  results.  Durinq  a  STOL -approach  at 
65  kts  t  32,5  m/s,  the  same  loadfactor  and  speed  variation  as  above,  a  lift  coefficient  variation  of 
about  1,5  will  result.  (Refer  to  Fig.  1).  In  the  low  speed  regime,  where  a  precise  maintainance  of  the  lift 
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coefficient  Is  needed,  the  definition  of  an  approach  speed  will  lead  to  a  rather  inaccurate  control  of  the 
aerodynimi c  state  of  flow. 

For  any  aircraft  there  is  a  transition  speed  above  which  speed  is  the  more  accurate  control  para¬ 
meter  and  below  which  the  angle  of  attack  or  the  lift  coefficient  is  the  more  favourable  control  parame¬ 
ter.  For  example,  flight  tests  with  a  STOL-aircraft,  having  a  wingloading  of  3  600  N/m2  and  an  aspect 
ratio  of  greater  than  4  revealed  that  the  flight  control  system  is  capable  to  control  the  angle  of  attack 
with  an  accurracy  of  0.8°  equalling  a  lift  coefficient  eccurracy  of  0.07  I'll  ■  These  conditions  lead  to  a 
transition  speed  of  about  160  kts  =  80  m/s.  Higher  wing  loadings  will  shift  the  transition  speed  to 
higher  values.  (Fig.  2) 


OlSCUSSlOh  OF  METHODS  FOR  SENSING  THE  AERODYNAMIC  STATE  OF  FLOW 

Basically  to  assess  and  control  the  aerodynamic  state  of  flow,  the  parameters: 

-  speed  v 

-  dynamic  pressure  q 

-  the  reciproval  value  of  the  dynamic  pressure  q" 

-  angle  of  attack  a  and 

-  lift  coefficient 

could  be  used.  As  shown  later,  wing  tap  pressure  measurements  can  be  used  to  determine  the  lift  coefficient 
directly.  To  control  the  aerodynamic  state  of  flow: 

a.  the  flow  state  must  be  measured 

b.  the  desired  flow  state  must  be  defined  and 

c.  the  system  deviation  must  be  controlled. 

For  some  good  reason  the  parameter  speed  is  used  for  control  as  long  as  a  speed  has  to  be  maintained 
for  air  traffic  control  or  weapon  delivery  purposes  or  the  structural  limits  of  the  aircraft  have  not  to  be 
exceeded.  However  for: 


-  best  angle  climb 

-  maximum  range  flight 

-  safe  approach  speed  and 

-  steepest  decent 

it  is  easier  to  define  a  desired  flow  state  in  terms  of  angle  of  attack  or  lift  coefficient  instead  of 
using  the  flight  handbook  and  evaluate  the  respective  speeds  in  relation  to  the  actual  aircraft  weight. 

According  to  Fig.  2  the  control  of  the  aerodynamic  flow  should  be  accomplished  within  the  low  speed 
regime  by  control  parameters  other  than  speed  or  dynamic  pressure.  The  typical  properties  of  the  different 
methods  to  sense  and  control  the  flow  state  are  put  together  in  the  table  below  13/: 


method 

V 

q 

q’1 

cl 

EH 

o' 

approach 

good 

good 

good 

medium 

mm 

poor 

measurement 

cruise 

good 

good 

good 

medium 

EUS 

poor 

high  speed 

good 

good 

medium 

unsatis¬ 

factory 

good 

unsatis¬ 

factory 

approach 

poor 

poor 

poor 

good 

good 

excellent 

set-value 

cruise 

poor 

ogi 

medium 

good 

good 

good 

high  speed 

good 

good 

unsatis¬ 

factory 

good 

unsatis¬ 

factory 

approach 

unsatis¬ 

factory 

unsatis¬ 

factory 

good 

good 

good 

good 

control 

cruise 

poor 

poor 

good 

good 

good 

good 

high  speed 

good 

good 

unsatis¬ 

factory 

unsatis¬ 

factory 

good 

unsatis¬ 

factory 

Table  l 

comparison  of  different  methods  for  measurement 
and  control  of  the  flow  state 

According  to  the  table,  using  both  the  dynamic  pressure  and  the  lift  coefficient  for  the  assessment  and 
control  of  the  aerodynamic  state  of  flow  will  grant  the  best  overall  performance  of  the  flight  control 
system. 
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DIRECT  *ASURENENT  OF  THE  LIFT  COEFFICIENT 


In  a  wind  tunnel  it  is  a  quite  common  procedure  to  measure  the  pressure  distribution  along  an  air¬ 
foil  and  to  determine  then  by  integration  the  lift  coefficient.  With  a  STOL-aircraft  Do  28  this  method 
was  applied  to  determine  the  lift  coefficient  during  flight.  To  get  sensor  costs  down  it  is  desirable  to 
sense  the  wing  pressure  at  just  one  discrete  position.  As  long  as  there  is  a  syimetrical  airfoil  with  a 
fixed  centre  of  pressure 


-  the  pressure  distribution  will  be  proportional  to  the  dynamic  pressure  and 

-  the  pressure  distribution  will  be  geometrically  similar  when  the  angle  of  attack  is  changed. 


Knowing  at  a  reference  state  of  flow  the  amount  of  lift  LQ,  the  wing  area  S,  and  the  tap  pressure  p  -., 
it  is  possible  to  determine  the  lift  coefficient  by  sensing  the  tap  pressure  p  and  the  dynamic  pressure 
q  using  the  relationship:  ! 


(8) 


q 


So  for  an  airfoil  with  a  fixed  pressure  centre  the  lift  coefficient  is  directly  proportional  to  the 
quotient  of  tap  pressure  pm  and  the  dynamic  pressure  q. 

The  aircraft  used  for  the  tap  pressure  measurements  was  a  Do  28  D  1  STOL  aircraft  (Fig.  3).  The 
wing  is  equipped  with  a  fixed  slat  and  double  slotted  landingflaps .  To  optimize  the  position  of  the 

pressure  tap  it  was  very  useful  to  have  wind  tunnel  results / 4/  at  hand  which  show  the  pressure  distribution 
of  an  airfoil  that  is  very  similar  to  that  of  the  Do  28-aircraft.  Fig.  4  shows  the  pressure  distributions 
at  0°  landingflaps  and  Fig.  5  at  30°  landingflaps.  At  the  upper  side  of  the  wing  the  pressure  maximum  is 
situated  constantly  at  17  *  wing  cord  and  -  even  as  this  airfoil  is  not  a  symmetrical  one  -  the  pressure 
distribution  appears  geometrically  similar  when  the  angle  of  attack  is  changed.  Referring  to  Fig.  4  and 
Fig.  5  it  is  quite  clear  to  install  the  pressure  sensing  taps  only  at  the  upper  side  of  the  wing  as  at  the 
lower  side  the  pressure  maxima  do  not  show  a  unique  tendency  and  the  pressure  gradients  to  be  expected 
appear  very  low. 

In  order  to  find  out  the  optimum  position  for  the  pressure  tap  at  the  Do  28  aircraft  three  different 
positions  for  the  pressure  tap  installation  were  chosen.  Fig.  6  shows  these  positions.  In  the  wing  span 
direction  the  positions  were  defined  so  as  to  minimize  the  influence  of  the  aileron  and  of  the  propeller 
area.  In  the  longitudinal  direction  the  wing  spar  limited  the  most  forward  tap  position  to  25  %  of  the  wing 
cord. 


The  tap  pressure  was  routed  from  the  tap  to  a  differential  pressure  transducer,  sensing  the  static 
pressure  minus  the  tap  pressure. 


FLIGHT  TEST  RESULTS 

The  flight  tests  were  conducted  with  a  Do  28  0  1  STOL-aircraft  (Fig.  3).  The  airtraft  is  equipped 
with  a  nose-boom-mounted  angle  of  attack  and  angle  of  sideslip  sensor.  The  static  and  pitot  pressure  sources 
are  mounted  on  the  top  of  the  rudder  fin.  The  aircraft  has  an  extensive  sensor  equipment  allowing  to  record 
32  flight  mechanical  parameters  on  a  magnetic  tape  unit  that  stores  these  data  in  a  pulse  coded  format  at 
92  Hertz.  Some  of  the  test  results  shown  were  plotted  online  during  the  test  flight  on  an  X-Y-plotter. 

The  first  flight  test  objective  was  to  determine  to  which  extent  the  tap  pressure  is  proportional 
to  the  dynamic  pressure.  Beginning  at  135  kts  s  67  m/s  and  with  a  constant  power  setting  at  40  %  rated 
power  the  aircraft  was  slowly  decelerated  to  about  50  kts  *  25  m/s.  The  deceleration  was  achieved  by  a 
slow  change  of  the  flight  path  angle  so  that  the  stationary  flight  requirement  W*  =  W  was  satisfied. 

Fig.  7  and  8  show  the  tap  pressure  p  versus  dynamic  pressure  q  for  the  tap  No.  I  and  2  respectively. 

At  tap  No.  2  there  is  only  a  very  small  variation  of  tap  pressure  with  the  flap  setting.  As  the  tendency 
changes  at  tap  No.  1  (-  there,  a  deflection  of  the  landing  flaps  reduces  the  tap  pressure-)  a  tap  that 
would  be  positioned  slightly  forward  of  tap  No.  2  should  have  no  change  of  tap  pressure  due  to  flap  move¬ 
ment.  The  results  of  tap  No.  3  are  not  discussed  here  as  the  pressure  gradient  is  smaller  than  at  tap 
No.  1  and  2  and  there  are  no  advantages  at  that  tap  position.  All  in  all  the  linearity  of  the  pm  -  q 
relationship  was  found  to  be  good. 

The  next  objective  was  to  determine  the  p  -  angle-of -attack  relationship.  Fig.  9  and  10  depict 
the  respective  plots-  The  flight  test  conditions  were  the  same  as  above.  Again  the  linearity  is  very  good. 
At  52°  flaps  and  11°  of  angle  of  attack  there  is  a  discontinuity  of  the  tap  pressure  which  corresponds 
to  a  change  of  angle  of  attack  of  about  1.5°.  However  as  an  angle  of  attack  of  that  magnitude  is  only 
reached  in  the  landing  flare,  this  effect  should  not  limit  the  use  of  the  tap  pressure  signal  in  flight 
control  systems. 

As  these  flight  tests  prove  the  linear  relationship  between  the  angle  of  attack,  the  flap  angle 
and  the  quotient  of  tap  pressure  and  dynamic  pressure,  the  tap  pressure  measurement  can  provide  a  signal 
for  flight  control  systems  representing  either  the  angle  of  attack  or  the  lift  coefficient. 

The  expected  good  dynamic  qualities  of  the  pressure  tap  signal  were  confirmed  in  the  flight  test.: 
Fig.  11  is  a  plot  of  a  rapid  vertical  maneuver  resulting  in  a  0,7  g-load.  The  maximum  difference  between 
the  angle  of  attack  sensor  aRef  and  the  tap  -  pressure-  derived  signal  ap  is  below  2  degrees  (refer  to 
the  uRef  -  a_  -  plot,  fig.  11).  The  sensitivity  of  the  tap  pressure  transducer  to  vertical  acceleration 
might  contribute  to  the  error.  For  gust  allivatlon  systems  a  pressure  tap  sensor  could  be  advantageous  as 
it  senses  the  higher  frequent  portion  of  the  horizontal  -  and  vertical  gusts  73/. 
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One  disadvantage  of  the  tap  pressure  measurement  is  the  sensitivity  to  the  errors  of  the  static 
pressure  system.  Normally  the  pressure  tap  signal,  that  is  fed  to  the  flight  control  system,  consists  of: 


(9) 


ps  ~  ptap 
ppitot  "  ps 


For  the  conditions  of  the  DO  28  test  aircraft  at: 


2000  ft  =  600  m  altitude 
100  kts  =  50  m/s  airspeed  and 
7  o  angle  of  attack, 

a  pressure  coefficient  of  1.28  will  result.  A  sideslip  angle  of  about  7  0  will  causeQa  static  pressure 
error  of  -0.5  mb,  changing  the  tap  pressure  signal  to  1.21  which  in  turn  causes  a  1  “-error  in  the  angle 
of  attack.  Fig.  12  shows  the  flight  test  results  at  sideslip  angles  for  the  0  0  flap  setting. 

In  Fig.  9  the  change  of  the  tap  pressure  due  to  engine  power  changes  is  shown.  The  lower  curve 
for  nK  *  0  0  represents  about  40  5S  of  rated  power  where  as  the  upper  curve  corresponds  to  about  60  %  of 
rated  K  power  causing  a  0.5  0  error  of  angle  of  attack,  is  the  angle  of  landing  flap  deflection. 

To  give  an  overall  impression  about  the  signal  quality  of  tap  pressure  measurements,  during  flight 
tests,  the  tap  pressure  derived  signals  are  compared  with  the  reference  signals  in  Fig.  13  and  14.  In 
Fig.  13  the  reference  signal  for  the  angle  of  attack  was  the  noseboom-mounted  angle  of  attack  sensor. 

When  taking  the  data  for  the  higher  angle  of  attack  portion,  gustiness  might  have  contributed  to  the  higher 
dispersion. 

For  stationary  horizontal  flights  it  is  possible  to  compute  the  lift  coefficient  c.  according  to 
equation  (4a)  with  W“  =  W.  These  computed  c. -values  are  compared  with  the  tap  pressure  derived  c. -values 
as  shown  in  Fig.  14.  The  dispersion  in  the  c, -values  ranges  in  the  order  of  0.2  providing  a  useful  signal 
for  flight  control  systems.  L 


CONCLUSION 

The  flight  test  data  show  the  usefulness  of  a  pressure  tap  signal  for  flight  control  systems.  Select 
ing  the  proper  tap  pressure  position  will  greatly  influence  the  success  of  tap  pressure  measurements.  As 
the  pressure  gradient  at  25  i-cord  for  the  tap  No.  1  and  38  %-cord  for  the  tap  No.  2  is  relatively  low, 
a  high  parameter  sensitivity  results  in  respect  to  the  tap  pressure  parameters. 

Further  examinations  should  focus  on  the  following  points: 

-  optimum  position  of  the  tap 

-  methods  for  error  compensation 

-  new  pressure  sensors  (pressure  pill) 

-  redundant  sensors 

-  flight  in  icing  conditions 

-  transferability  of  results. 
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LOW  COST  TWO  G1MBAL  INERTIAL  PLATFORM  AND  ITS  SYSTEM  INTEGRATION 

R.N.  PRIESTLEY  and  J.B.  TOWLER 
FERRANTI  DEFENCE  SYSTEMS  LTD 
NAVIGATION  SYSTEMS  DEPARTMENT 
SILVERKNOWES,  FERRY  ROAD,  EDINBURGH  EH*  *AD 

SUMMARY 

The  development  of  more  accurate  inertial  systems  has  led  to  more  expensive  inertial  instruments  and  complex 
electronics.  Future  navigation  systems  will  require  further  improvements  in  accelerometer  and  gyro  design  in  order 
to  achieve  the  required  performance.  There  are  however  doubts  as  to  whether  autonomous  inertial  systems  will  be 
sufficiently  accurate. 

An  alternative  approach  is  to  combine  a  second  sensor  with  the  inertial  system  to  improve  performance,  for  example 
doppler  velocities  or  NAVSTAR/GPS  positions  and  velocities.  The  inertial  platform  may  then  be  simplified,  retaining 
high  accuracy  only  in  the  platform  parameters  having  an  impact  on  the  integrated  system  performance.  This 
simplification  allows  lower  cost  of  ownership  with  an  increase  in  reliability  and  a  medium  accuracy  reversion 
capability.  The  inertial  system  computer  may  be  programmed  with  the  integration  software  so  avoiding  a  seperate 
dedicated  integration  computer  with  the  consequent  decrease  in  reliability. 

Introduction 

During  the  last  20  years  inertial  technology  has  been  developed  and  applied  to  re  solve  the  problems  of  airborne 
navigation,  both  civil  and  military.  During  this  period  there  has  been  a  shift  from  single  axis  floated  gyros,  through 
two  axes  dry  gyros  to  laser  gyros  used  in  strapdown  configurations  with  parallel  and  significant  improvements  in 
accelerometers.  These  developments  have  been  driven  by  the  need  to  improve  accuracy,  reliability  and  lower  cost  of 
ownership.  At  this  stage  the  civil  operators  appear  satisfied  that  a  triple  inertial  system  meets  their  requirements  in 
terms  of  accuracy  and  reliability  and  apparently  is  cost  effective.  However,  the  military  user  of  high  performance 
fixed  wing  and  rotary  wing  aircraft  have  more  exacting  requirements  for  position  and  velocity  accuracies  to  be 
achieved  in  a  much  more  demanding  flight  profile.  Doubt  exists  whether  the  desired  improvements  can  be  met  cost 
effectively  by  the  costly  design  and  manufacture  of  still  more  accurate  gyros  and  accelerometers.  It  may  be  that  a 
more  modest  inertial  system  adopted  for  velocity  or  position  updating  by  other  sensors  may  offer  significant  benefits 
in  accuracy  and  cost. 

Two  Gimbai  Inertial  System 
Salient  Features 

The  Ferranti  FIN  1110  (2-GINS)  is  a  single  LRU  2-gimbal  schuler  tuned  inertial  navigation  system.  It  has  been 
designed  for  best  performance  at  lowest  cost  for  operation  in  any  vehicle  not  required  to  perform  complete  rolls  or 
loops  directly  through  the  vertical.  It  is  capable  of  manoeuvre  up  to  and  ten  degrees  past  the  vertical  and  is  suitable 
for  operation  in  the  most  agile  helicopters  and  in  most  non-combat  and  transport  aircraft. 

Costs  have  been  reduced  largely  by  accepting  the  one  constraint  of  limited  freedom  in  Fi.\,h  and  Roll.  This,  together 
with  the  adoption  of  strapdown  operation  in  Azimuth,  has  allowed  the  use  of  only  two  gimbals  instead  of  four. 
Further  savings  have  been  effected  by  employing  unique  design  techniques  to  combine  the  functions  of  gimbai  drive 
motor  and  angular  sensor  into  one  unit. 

The  isolation  of  the  instrument  platform  from  pitch  and  roll  rates  allows  the  use  of  a  high  quality  two  axis 
"Oscillogyro"  DTG  for  the  two  vertical  channels. 

A  very  high  standard  of  performance  is  maintained  by  fitting  three  high  grade  FA2  accelerometers  to  match  the 
Oscillogyro  accuracy.  For  strapdown  operation  in  the  azimuth  channel  a  GG 1 II I  floated  rate  gyro  provides  good 
performance  at  low  cost. 

The  use  of  the  Oscillogyro  in  the  two  vertical  channels  enables  the  2-GINS  to  deter  mine  initial  True  North  within 
♦  0.J  degree. 

Since  the  instrument  platform  is  maintained  stable  in  the  horizontal  plane  the  full  performance  of  the  FA? 
accelerometers  is  available  for  the  navigation  calculations  with  no  degradation  due  to  coupled  components  of  the 
Earth’s  gravitational  field. 

Reliability  is  increased  not  only  by  the  reduction  of  2  gimbals  but  also  by  the  resultant  reduction  in  the  number  *f 
servo  amplifiers  and  their  associated  electronics.  The  smaller  platform  assembly  is  more  rugged  and  the  use  of  tap*  s 
instead  of  sliprings  gives  a  further  gain  in  dependability. 

Although  possessing  a  useful  pure  IN  capability  the  2-C1NS  is  primarily  intended  to  be  used  in  "mixed"  systems  m 
which  the  inherent  advantages  of  an  inertialiy  based  device  in  terms  of  accurate  gyrocompass  alignment,  heading  and 
attitude  are  combined  with  accurate  velocity  or  position  derived  from  some  other  devices  or  positioning  systeu 
The  mixing  between  the  two  (or  more)  contributing  systems  is  accomplished  within  the  ’-GINS  using  the  Kalman 
filter  incorporated  in  the  2-GINS  computer  software. 


25-2 


Suitable  contributory  inputs  to  the  Kalman  filter  can  be  derived  from  the  following  sources: 


(a) 

Doppler 

- 

Velocity 

(b) 

Navstar 

- 

Position 

(c) 

Tacan 

- 

Position 

<d) 

Omega 

- 

Position 

(e) 

Tercom 

- 

Position 

(») 

Air  Data  system 

- 

Velocity 

<B) 

Vehicle  Odometer 

- 

Velocity 

For  helicopter  operations  Doppler  velocity  is  by  far  the  most  important  source  at  the  present  time,  although  GPS 
position  may  become  significant  in  the  future. 

A  Doppler/2-GINS  mix  offers  the  following  advantages: 

enhanced  heading  accuracy  matches  Doppler  velocity  accuracies 
elimination  of  magnetic  compass  vagaries 

rapid  alignment  techniques  allow  take  off  reaction  time  as  low  as  30  secs  (alignment  completed  in  the  air) 

-  in-air  alignment  can  give  full  performance  accuracies 
ship  borne  operations  with  full  performance  accuracies 

In  addition  to  these  advantages  over  Doppler/Flux  Valve  or  pure  IN  system  the  2-GINS  has  a  sufficiently  good  pure  IN 
performance  of  its  own  to  allow  the  Doppler  to  be  used  in  a  "burst-aided"  mode  wherein  it  is  switched  on  at  intervals 
in  short  bursts  to  provide  corrective  inputs  to  the  Kalman  filter.  This  mode  has  obvious  advantages  in  sensitive 
situations  requiring  minimum  radio  or  radar  transmissions. 

Integration  with  Doppler  Radar 

The  FIN  1110  is  a  medium  accuracy  inertial  navigation  system  which  is  capable  of  accurate  gyrocompassing.  Doppler 
radar  provides  accurate  velocities  but  with  significant  short  term  noise.  However  accurate  azimuth  is  required  for 
navigation  which  may  only  be  provided  by  an  inertial  system.  The  good  long  term  performance  of  doppler  radar  is 
common  to  most  radio  navigation  systems  which  have  noisy  short  term  outputs.  This  noise  approximates  to  a  gaussian 
random  variable  and  so  the  doppler  and  inertial  data  may  be  combined  in  a  Kalman  filter. 

The  FIN  1110  Kalman  filter  estimates  the  long  term  errors  in  the  inertial  instruments  such  as  platform  tilts  or 
misalignments  and  gyro  drifts.  The  filter  also  estimates  scale  factor  and  beam  misalignment  errors  in  the  doppler 
radar.  The  short  term  noise  in  the  doppler  outputs  is  also  effectively  filtered. 

The  FIN  1110  filter  estimates  13  inertial  system  error  parameters  and  two  doppler  radar  errors.  The  filter  software 
is  combined  with  the  normal  navigation  calculations  and  is  iterated  at  7  -  8  seconds.  Since  the  filter  is  estimating 
slowly  changing  errors  this  iteration  rate  is  easily  adequate.  The  total  program  size  of  the  filter  is  13  Kbytes  and 
2.5  Kbytes  of  random  access  memory  is  used.  The  filter  operates  open-loop  only  correcting  the  FIN  1110  outputs. 
However  after  long  periods  and  during  initial  flight  after  a  poor  alignment  the  errors  in  the  FIN  1 1 10  may  increase  to 
large  values.  In  this  case  the  filter  outputs  will  be  used  to  periodically  rapidly  re-level  the  inertial  platform.  Tins 
technique  has  been  proven  on  other  Ferranti  systems  and  eliminates  many  potential  problems  associated  with 
continuous  correction  of  the  platform  errors. 

The  continuous  estimation  process  in  the  Kalman  filter  allows  a  poor  initial  alignment  of  the  FIN  1110  with  the 
alignment  being  completed  after  take-off. 

Modes  of  Operation  in  Helicopters 

There  are  two  distinct  environments  to  be  considered  -  iandbased  and  shipborne.  Of  these  two  it  is  the  shipborne 
application  that  poses  the  more  significant  problems. 

Shipborne  Operation 
Alignment 

The  alignment  of  an  aircraft  pure  INS  on  board  a  ship  is  usually  executed  by  employing  techniques  which  "transfer" 
the  alignment  of  the  ships  SINS  or  a  dedicated  transfer  INS  platform  to  the  aircraft  INS.  This  method  is  not  cost 
effective  for  helicopter  operations  and  is  unsuitable  for  most  ships  other  than  large  carriers. 

The  advantage  of  a  mixed  IN  system  such  as  Dopp!er/IN  is  that  the  alignnent  on  board  the  ship  need  not  be  a  very 
high  quality.  As  soon  as  the  helicopter  is  airborne  and  the  doppler  inputs  become  valid  the  Kalman  filter  begins  the 
task  of  estimating  the  system  errors  and  refining  the  alignment.  Even  so  it  is  still  necessary  to  perform  an  initial 
on-deck  alignment. 

The  problem  ol  obtaining  the  best  quality  initial  alignment  before  take-off  is  simply  one  of  finding  or  inserting  a  best 
estimate  of  true  heading  and  of  determining  platform  horizontal  as  accurately  as  possible  whilst  subjected  to  the 
ships  motion  in  terms  of  pitch,  roll,  yaw,  heave,  sway  and  surge.  In  this  environment  the  unique  2-gimbal 
construction  of  the  FIN  1110  2-GIN.S  has  an  advantage  over  a  full  strapdown  system  as  the  sensor  instruments  are 
maintained  physically  horizontal  and  are  isolated  from  the  effects  of  pitch  and  roll  i.c.  from  the  two  most  severe 
parameters  of  ship's  motion.  It  is  therefore  possible  for  the  Oscillogyro  to  attempt  a  <fur«  t  gyrocompassing  operation 
to  define  the  axis  of  the  earths  deg/hr  rotation  rate  without  this  being  obscured  by  tin  deg/soc  rates  of  ship's  roll  and 
>itch.  However  the  penalty  attached  to  this  operation  is  that  the  alignment  time  constant  has  to  be  increased  to  a 
value  at  which  the  alignment  process  is  relatively  unaffected  by  ship's  motion.  In  operational  usage  this  usua'Sv 
results  in  an  unat  ceptably  long  on-deck  alignment  time,  l  ast  shipborne  alignment  .  <  an  he  a<  hieved  by  slaving  the 
2-GINS  heading  to  the  magnetic  compass  and  performing  a  simple  on-deck  levelling  pro*  erJurc.  Although  the 
magnetic  compass  information  can  he  very  inaccurate  on- deck  it  improves  immediately  the  helicopter  has  lifted  off. 
At  the  same  time  the  doppler  velocities  become  valid  and  the  fine  levelling  can  he  completed  within  a  few  minutes  of 


take-off.  As  soon  as  the  pilot  is  satisfied  with  his  attitude  and  magnetic  heading  information  he  can  switch  into  the 
Doppler/IN/Filter  self  gyrocompass! ng  navigation  mode.  Figure  1  indicates  typical  Airborne  alignment  times. 

In  the  intervening  period  between  take  off  and  the  time  when  specified  performance  is  achieved  there  will  inevitably 
be  a  build  up  of  position  error.  This  error  will  be  inversely  proportional  to  the  quality  of  the  initial  alignment  and  to 
the  speed  of  operation  of  the  Kalman  filter. 

Operational  Modes 
"NORMAL"  Navigation  Mode 

This  is  a  doppler/IN  mode  performing  dead  reckoning  navigation  using  the  refined  doppler  velocities  and  IN  heading 
available  from  the  Kalman  filter.  Accurate  attitude  and  true  heading  are  available  for  output  to  other  aircraft 
systems. 

The  doppler  radar  may  be  operated  continuously  or  in  a  "burst-aided"  mode  (BAM)  with  a  duty  cycle  as  low  as  1  to  10. 

Reversionary  "pure- inertial"  Made 


At  times  when  the  doppler  signal  is  absent  or  becomes  "invalid"  the  navigation  process  is  continued  with  the  2-GINS 
operating  as  a  pure  inertial  navigator. 

The  performance  accuracies  in  this  mode  are  very  much  dependent  on  the  degree  of  refinement  of  the  error 
estimates  in  the  Kalman  filter  at  the  time  of  switch  over.  If  the  Kalman  filter  has  converged  to  its  steady  state 
limits  then  a  position  performance  of  in  the  order  of  1  nm  for  the  first  hour  can  be  expected. 

"FAST-ERECT  A  HRS"  Mode 

Fast  erection  can  be  performed  on  the  ground  or  on  board  ship  and  also  in  the  air  during  static  hover  or  straight 
unaccelerated  flight. 

One  of  the  advantageous  aspects  of  Oscillogyro  performance  is  that  it  enables  the  design  of  a  very  fast  capture  and 
alignment  loop  typically  less  than  30  seconds. 

In  this  fast  erection  mode  the  2-GINS  has  its  azimuth  output  slaved  to  magnetic  compass  heading  and  is  only  required 
to  level  its  platform  to  the  horizontal  to  provide  for  attitude  outputs.  After  erection  the  system  can  be  switched  into 
an  AHRS  mode  or  into  the  NORMAL  doppler/IN  filter  mode  or  into  a  Schuler  tuned  "AHRS"  mode  which  allows  the 
aircraft  freedom  for  normal  manoeuvre.  In  the  AHRS  mode  heading  remains  slaved  to  magnetic  compass  (plus 
variation). 

Landbased  Operation 

This  is  really  a  simplified  case  of  shipborne  operation  with  the  one  difference  that  the  normal  alignment  method  will 
be  5  min  gyro-compassing  with  automatic  transition  to  doppler/IN  filter  operation  after  wheels  off  and  at  the 
appearance  of  a  doppler  valid  signal.  Typical  alignment  time  is  indicated  at  figure  2. 

Land-Sea  Switching 

Doppler  radar  produces  different  results  over  water  from  those  experienced  over  land.  Over  water  the  doppler 
suffers  a  scale  factor  error  which  is  predictable  and  a  bias  error  caused  by  surface  water  movement  which  is 
unpredictable.  In  addition  to  these  errors  it  is  found  that  the  doppler  signal  noise  characteristics  are  also  changed. 

In  most  doppler  radar  navigation  systems  a  manual  Land/Sea  switch  is  provided  to  enable  scale  factor  error 
compensation  to  be  effected  at  the  Land/Sea  interfaces. 

With  a  Doppler/Flux  Valve  navigation  system  any  delay  in  implementing  the  Land/Sea  switching  will  result  in  a 
position  error  proportional  to  the  change  in  scale  factor  x  velocity  x  time  delay  in  effecting  the  Land/Sea  switch. 
There  are  no  other  effects. 

In  an  integrated  Doppler/Kalman  filter/INS  system  an  unswitched  Land/Sea  crossing  will  introduce  a  sudden  velocity 
error  into  the  Kalman  filter  which  it  will  interpret  as  a  step  change  in  esimtated  azimuth  error.  Unless  this  situation 
is  quickly  corrected  by  the  proper  use  of  Land/Sea  switch  the  Kalman  filter  state  estimates  will  suffer  a  significant 
disturbance  which  will  take  several  minutes  to  decay.  Computer  simulations  of  this  phenomenon  indicate  that  the 
disturbance  can  result  in  considerable  position  errors. 

The  Ferranti  2-GINS  continuously  monitors  the  difference  between  the  raw  doppler  velocity  data  and  the  inertially 
smoothed  outputs  of  velocity  from  the  Kalman  filter.  Any  sudden  velocity  error  such  as  that  caused  by  a  Land/Sea 
crossing  is  detected.  A  flagged  warning  is  then  presented  to  the  pilot,  the  Kalman  filter  state  elements  are  fro/m 
and  the  navigation  system  automatically  put  into  the  free  inertial  mode.  To  return  to  normal  Doppler/IN  navigation 
the  pilot  must  negate  the  flag  either  by  implementing  the  appropriate  Land/Sea  switching  or  else  overriding  the 
warning  flag. 

Figure  3  gives  an  indication  of  the  expected  relationship  between  heading  error  and  the  error  in  Doppler  velocity. 

FIN  1 1 10/Dopplcr  System  Accuracies 

The  initial  alignment  of  the  FIN  1 1 10  is  0.1  5°  r.m.s.  within  2-5  minutes  of  swith-on.  Operating  in  a  continually  gym 
compassing  inode  it  accepts  the  filtered  velo<  ity  of  the  doppler,  and  the  a«  <  urac  y  of  the  [reading  during  flight  is  i 
fuiK  lion  of  the  accura<  y  of  the  doppler  velocity  as  indicated  in  Figure  3. 

The  convergence  of  the  filter  and,  hence,  navig.it ion  accuracy,  depends  on  time,  flight  profile,  quality  of  the  gr*»mv» 
alignment  and  quality  of  the  aiding  input.  It  is  impossible  to  accurately  sjH*cify  tin*  performance  for  every  m to.it i  .n 
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in  this  paper.  Simulation  software  describes  the  performance  of  the  FIN  1110  equipment  given  a  flight  profile  and 
aidir^  input.  This  software  may  be  run  to  evaluate  the  FIN  1 110  against  specific  requirements  and  plots  made 
available,  shewing  azimuth  position  and  velocity  accuracies  for  given  situations.  Figures  4.1  -  4.6  illustrate  a  typical 
flight  profile  ef  a  tactical  helicopter  and  indicate  expected  accuracies  of  north  and  east  velocities,  azimuth,  doppJer 
along  track  scale  vector  error  and  doppler  misalignment  angle. 

The  convergence  time  of  the  Kalman  Filter  is  a  function  of  the  availability  and  quality  of  the  Doppler  or  GPS 
information  but  is  typically  30  minutes  for  full  convergence. 

Loss  of  Doppler  or  GPS  information  shall  cause  the  FIN  1 1 10  system  to  revert  to  a  pure  inertial  NAV  mode.  The 
secondary  navigation  performance  shall  range  from  1  nm/hr  r.m.s.  to  the  autonomous  performance  level  of  6  nm  in  1 
hour  depending  on  the  convergence  of  the  FIN  1 1 10  Kalman  Filter. 

Illustrations  5  A/B  illustrate  flight  accuracies  achieved  on  a  complex  route  (typical  of  tactical  helicopter)  using  a 
Decca  17  hyperbolic  chain  with  a  one  sigma  accuracy  of  200  metres  as  the  datum  reference.  This  datum  is  not  really 
sufficiently  accurate  for  the  purpose,  but  indicates  an  overall  accuracy  of  the  IN/doppler  system  significantly  better 
than  1  nautical  mile,  ft  is  notworthy  that  this  accuracy  is  maintained  over  the  whole  90  minute  flight. 

FIN  1110  with  N AVST  AR/GPS 

In  situations  where  doppler  combined  with  the  FIN  1110  is  not  adequate  NAVSTAR/GPS  is  likely  to  be  a  more 
accurate  alternative. 

The  NAVSTAR/GPS  satellite  navigation  system  provides  high  accuracy  position  and  velocity  to  any  receiver  with 
access  to  the  high  accuracy  'P*  code.  The  NAVSTAR  receiver  outputs  may  be  combined  with  the  inertial  data  in  the 
FIN  1110  Kalman  filter.  The  filter  may  accept  position  and  velocities  in  geographic  axes  or  the  range  and  range  rate 
to  each  satellite.  This  information  is  processed  to  form  low  noise  high  accuracy  position  and  velocity  and  estimates 
of  the  FIN  1110  azimuth  error  and  gyro  drifts.  Figure  6  indicates  a  possible  System  Configuration. 

The  FIN  111 0  may  provide  velocities  in  geographic  axes  in  order  to  aid  the  NAVSTAR  receiver  tracking  loops.  The 
bandwidths  of  the  tracking  loops  may  then  be  reduced  increasing  the  anti-jam  performance.  The  Kalman  filter  will 
predict  the  errors  in  the  FIN  1110  allowing  high  accuracy  navigation  when  the  receiver  is  jammed  or  loses  signals  due 
to  aerial  shadowing.  This  error  prediction  also  results  in  faster  re-acquisition  of  the  NAVSTAR  signal. 

The  NAVSTAR  receiver  expects  the  velocity  aiding  in  geographic  axes.  Extensive  simulation  has  shown  that  small 
inertial  system  azimuth  errors  may  result  in  large  aiding  errors  during  manoeuvers.  The  continuous  gyro-compassing 
of  the  FIN  1110  aided  by  NAVSTAR  position  and  velocity  should  minimise  this  effect. 

The  use  of  NAVSTAR  allows  rapid  initial  gyrocompassing.  Initial  platform  levelling  may  be  completed  in  30  seconds 
and  with  a  magnetic  input  to  provide  an  initial  azimuth  the  FIN  1110  may  become  airborne.  The  correct  azimuth 
would  then  be  determined  during  flight.  The  Kalman  filter  will  automatically  remove  the  accumulated  position  error 
caused  by  the  poor  initial  azimuth  value. 

Conckniom 

Pure  inertial  systems,  no  matter  how  accurate  suffer  from  decrease  in  accuracy  with  time  and  must  therefore  be 
bounded  by  some  other  sensor  where  very  high  position  and  velocity  accuracies  are  required. 

Doppler  by  virtue  of  good  long  term  velocity  combines  well  with  relatively  low  grade  inertial.  At  the  present  time, 
and  at  todays  costs,  it  would  appear  that  a  doppler-inertial  mixed  system  such  as  has  been  described  offers  a 
significantly  cheaper  and  more  accurate  solution  to  navigation  and  weapon  aiming  than  pure  inertial  with  good 
reversionary  capability.  However,  Doppler  is  a  radiating  sensor  and  continuous  emission  is  not  desirable  in  the 
military  environment.  Reduction  of  Tx  power  and  burst  aiding  of  inertial  may  be  acceptable. 

When  GPS  becomes  fully  operational  in  1 988/89  integration  with  a  low  cost  inertial  sensor  promises  high  position 
accuracy,  accurate  attitude  and  velocity  information  for  enhanced  weapon  delivery  under  all  conditions  of  battlefield 
jamming  environment,  all  at  an  affordable  cost. 
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SUMMARY 

The  development  of  the  Penguin  MK3  nisaile  waa  initiated  by  the  Royal  Norwegian  Air 
Force  as  a  modern  atand-off  weapon  for  the  F-16  aircrafta.  The  guidance  and  control 
ayatem  of  thia  missile  is  built  upon  the  moat  modern  principles  using  all  digital 
electronics  with  distributed  computational  power.  The  system  is  separated  in  6  main 
functions,  each  with  its  own  powerful  processor.  High  performance  is  achieved  through 
the  use  of  latest  generation  standard  microprocessors  and  connected  together  by  a  high 
capacity  data  bus.  Some  of  the  results  obtained  from  this  development  are  described  in 
this  paper. 


1  INTRODUCTION 

The  paper  describes  the  guidance  and  control  functions  of  the  Penguin  HK3  missile.  This 
missile  is  an  airlaunched  version  of  the  norwegian  Penguin  anti-ship  missile.  It  is 
being  developed  for  the  Royal  Norwegian  Air  Force  for  use  with  their  P-16  aircrafts. 

Figure  1  illustrates  the  exterior  and  interior  of  the  missile.  The  target  seeker  is 
based  on  infrared  detection.  The  control  unit  is  all  digital  and  contains  the  auto¬ 
pilot,  trajectory  generation  and  other  functions.  The  Inertial  navigation  platform  is  a 
semi  strap-down  platform  (stabilized  in  roll  axis)  using  two-axes  dry  tuned  gyros.  The 
platform  provides  3-dimensional  navigation  and  angular  information.  Missile  flight  con¬ 
trol  is  provided  by  two  pairs  of  canards  actuated  by  a  cold-gas  powered  hydraulic 
servo.  The  airframe  is  roll  stabilized  by  electrically  powered  aileron  actuators. 

The  operational  requirements  call  for  a  missile  to  be  launched  from  both  high  and  low 
altitudes.  It  must  be  able  to  fly  over  terrain  (mountains)  and  at  a  very  low  midcourse 
altitude.  The  target  seeker  concept  also  requires  an  airframe  with  high  manoeuverabil- 
ity. 

Further  the  missile  shall  navigate  along  a  specific  trajectory  and  fly  through  (turn 
at)  a  predefined  waypoint.  Figure  2  presents  an  example  of  attack  sequence  using  the 
radar  mode.  (Other  modes  are  available). 

To  fulfill  all  these  requirements  it  becomes  necessary  to  have  guidance  and  control 
functions  with  high  performance. 

2  DISTRIBUTED  ARCHITECTURE 

Early  in  the  development  program  it  was  decided  to  distribute  the  digital  guidance  and 
control  system  into  several  independent  functions  with  their  own  data  processing  capa¬ 
bility.  There  were  two  main  reasons  for  this: 

e  The  data  processing  had  to  be  split  among  several  procennors,  since  no  known  single 
micro-procesaor  had  the  capability  to  do  all  processing,  needed. 

e  Development  work  could  be  done  in  parallel  on  independent  functions.  Specifications 
were  established  for  each  function  and  they  were  designed  and  tested  separately, 
which  contributed  to  shorter  development  time. 

The  complete  guidance  and  control  system  is  divided  in  five  main  functions  plus  a  tele¬ 
metry  function  for  the  test  missiles.  Figure  3  shows  n  block  schematic  of  the  functions 
and  how  they  are  distributed.  The  functona  are: 

•  Adapter.  This  is  located  in  a  npearate  unit  between  the  mtnsile  and  the  aircraft 
pylon.  It  Interfaces  the  missile  to  the  aircraft  avionics  multiplex  bus  and  discrete 
signal  lines.  Ths  function  controls  start-up  and  launch  sequences.  It  also  initiates 
an  automatic  test  of  the  missile  and  keeps  n  test,  result  record  for  maintenance  pur 
poses. 
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•  Control  Function.  This  function  contains  the  missile  autopilot  and  produces  guidance 
commands  to  the  canard  and  aileron  actuators.  These  commands  are  control  surface  pos¬ 
ition  coamands.  To  give  the  missile  good  stability  in  flight,  the  actuators  have  a 
small  signal  bandwith  of  approximately  30  Hz.  Also  to  ensure  adequate  stability  a 
high  update  rate  of  200  Hz  was  chosen  for  the  inner  guidance  loop  computations. 
(Missile  angular  position  and  guidance  commands).  The  outer  guidance  loop  computes 
the  correct  trajectory,  and  deviations  from  it,  on  the  basis  of  position  data  from 
the  navigation  function  and  the  altimeter. 

Many  of  the  autopilot  algorithms  are  made  adaptive  with  respect  to  flight  altitude  to 
account  for  variations  in  aerodynamic  forces  acting  on  the  missile.  Quick  guidance 
response  and  good  stability  margins  have  been  achieved. 

The  Control  function  also  initiates  various  other  actions  during  missile  flight,  e.g 
motor  ignition,  altimeter  transmission,  seeker  activation  etc. 

s  navigation  function  (IH3).  The  Penguin  weapon  operational  concept  requries  a  precise 
navigation  function  to  ensure  good  target  selection  capability  and  a  high  hit 
probability  even  in  confined  coastal  waters.  The  heart  of  this  function  is  the 
lntertial  navigation  platform  (IMU).  This  is  a  3-axes  semi  strap-down  platform  with 
stabilised  roll  axis.  As  output  from  the  navigation  processor  the  function  provides 
body  angles,  position  and  velocity  data. 

e  Alignment  function.  To  provide  the  required  navigation  accuracy  this  platform  must  be 
allffteA  with  errors  down  in  the  mllliradian  range,  velocity  initialisation  must  be 
better  than  1  meter  per  second.  Also  excessive  bias  and  scale  factor  errors  of  the 
gjrroa  and  accelerometers  must  be  measured  and  corrected  for.  The  only  way  to  fulfill 
the  above  requirements  on  a  fighter  aircraft  is  to  perform  a  transfer  alignment  with 
the  aircraft  IMS  as  the  reference.  This  means  to  compare  the  data  from  the  aircraft 
INS  and  the  data  from  the  missile  IMS  and  then  filter  out  the  misile  IMS  errors  based 
on  differences  in  data.  The  most  convenient  data  to  compare  in  this  respect  are 
velocity  and  angular  data  and  this  is  done  in  the  Alignment  function.  The  Alignment 
function  is  implemented  in  a  microprocessor  located  in  the  missile  adapter  as  an  18 
state  Kalman  filter  using  3  velocity  and  1  angulare  measurement  (azimuth)  as  input. 
Figure  4  shows  a  block  schematic  of  the  alignment  filter  structure.  The  RELATIVE 
MOTION  COMPENSATION  block  in  the  figure  compensates  for  missile  offset  relative  to 
the  aircraft  INS  location  when  aircraft  rotation  occurs. 

Figure  5  shows  a  typical  filter  response  presented  as  the  standard  deviation  (milli- 
radlans)  of  the  angular  error  estimates  as  a  function  of  time  (seconds).  The  pitch 
(PI)  and  roll  (RO)  deviations  are  quickly  reduced  from  initial  values  of  8  mrad  to 
approximately  1  mrad.  However,  the  azimuth  (AZ)  deviation  is  significally  reduced 
when  the  aircraft  performs  a  horizontal  manoeuver  (3  g)  which  occurs  after  60  seconds 
in  the  example  shown. 

•  Target  seeker.  The  seeker  is  based  on  the  principle  of  infrared  defection.  It  con¬ 
tains  advanced  signal  processing  to  give  the  missile  high  countermeasure  resistance. 
Further  several  seeker  modes  are  available.  The  seeker  provides  target  position  data 
to  the  autopilot. 

•  Telemetry  Function.  The  test  missiles  are  provided  with  a  telemetry  function.  This 
function  gather  all  data  flowing  between  the  functions,  and  transmit  them  for  flight 
test  purposes. 

All  these  functions  are  tied  together  with  the  missile  data  bus.  This  is  an  8  bit 
parallel  (bytewide)  data  bus  with  high  data  transfer  capacity.  Once  normal  data 
transfer  mode  is  entered  the  bus  uses  no  bus  master.  But  data  transfer  is  synchron¬ 
ized  by  a  specific  synch  message  from  one  of  the  bus  terminals.  The  synch  message  is 
tranmsitted  at  a  fixed  frequency  of  200  hertz.  The  various  bus  terminals  may  transmit 
messages  on  the  bus  in  predetermined  time  slots  relative  to  The  synch  message. 

The  bus  is  designed  to  have  a  maximum  capacity  of  800  kilo-byte  per  second,  the  capa¬ 
city  used  in  the  missile  today  is  100  kilo-byte  per  second. 

Data  is  transferred  as  messages  of  4  to  50  byte  length.  3  byte  are  used  for  identi¬ 
fication  and  check. 

The  bus  is  tailored  to  the  missile  internal  UBe  and  a  maximum  of  5  separate  terminals 
may  send  messages  on  it.  In  addition  other  terminals  may  be  listeners  on  the  bus  as 
is  the  Telemetry  function.  Depending  on  the  nature  of  the  subsystem  (function)  both 
dedicated  terminal  processor  or  circuits  connected  directly  to  the  function's  main 
processor  is  used  as  bus  terminal. 

3  STAND  ARP  PR0CK33QR3 

Each  of  the  main  functions  mentioned  above  has  its  own  powerful  micro-processor.  The 

tasks  to  be  solved  in  each  of  these  processors  are  such  that  only  the  moat  powerful 

16/32  bit  micro-processors  available  can  do  the  job.  The  standard  processor  for  these 

functions  was  selected  in  mid  1878.  At  that  time  very  few  alternatives  existed. 
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The  development  program  could  not  sponsor  development  of  an  own  micro-processor.  On  the 
contrary  it  was  important  to  select  an  established  (or  to  become  an)  industry  standard 
powerful  micro-processor.  This  was  important  to  keep  costs  down  and  be  able  to  take 
advantage  of  the  general  technology  development.  The  following  is  a  list  of  other 
required  characteristics  reviewed  before  the  final  selection  was  made: 

•  Have  second  source. 

•  Available  in  military  temperature  range  and  quality. 

•  Have  powerful  support  curcuits. 

•  Also  available  in  standard  computer  modules  to  be  used  in  test  and  support  equipment. 
This  gives  maximum  standardization  in  software  development. 

•  Support  efficient  use  of  high  order  language. 

•  Have  powerful  multi-user  development  support  system. 

Finally  we  found  that  the  Motorola  MC  68000  micro-processor  satisfied  our  requirements 
and  it  was  selected  as  the  standard  processor  for  the  Penguin  MK3  missile.  It  is  used 
in  all  the  functions  described  in  chapter  2. 

It  was  early  decided  to  write  as  much  as  possible  of  the  software  in  a  high  order  lang¬ 
uage  (HOL).  The  languages  PASCAL  and  "C"  were  tested  to  find  which  was  the  most  suit¬ 

able  for  this  purpose.  From  the  compilers  available  at  that  time  it  was  found  that  "C" 
gave  by  far  the  most  efficient  program  code.  The  HOL  "C"  has  therefore  been  chosen  as 
the  standard  language.  Although  "C"  is  an  efficient  language  it  haB  been  necessary  to 
write  a  number  of  time— crit ical  subroutines  in  assembly  language,  so  a  mix  between  ”C” 
and  assembly  has  been  the  result. 

Standard  computer  modules  with  the  same  micro-processor  have  been  very  useful  in  test 

equipment.  A  dedicated  bus  monitor  that  can  monitor  and  save  data  flowing  on  the  mis¬ 

sile  data  bus  has  been  developed  and  is  an  example  in  this  area. 

4  RESULTS 

The  use  of  standard  micro-processors  and  common  solutions  for  various  processor  funct¬ 
ions  have  helped  to  keep  the  time  schedule  in  the  development  program.  As  a  result  the 
first  live  Penguin  MK3  was  fired  almost  exactly  on  the  date  planned  more  than  3  years 
earlier. 

The  results  from  this  firing  were  very  encouraging.  The  missile  separated  well,  and 
navigated  the  trajectory  as  planned.  Figure  6  and  ’  are  extracts  from  data  collected 
from  the  first  firing.  Figure  6  indicates  the  guidance  accuracy  in  altitude  and  figure 
7  the  missile  pitch  angle.  Both  figures  indicate  a  missile  guidance  with  good  precision 
and  stability. 

The  distributed  architecture  has  made  it  easier  to  test  the  software  of  the  individual 
functions.  The  total  amount  of  missile  software  (approximately  200  kilobyte)  have  in 
this  way  been  divided  and  structured  and  hence  is  easier  to  maintain.  The  various 
function's  software  could  be  tailored  to  the  requirements  of  that  particular  function. 

We  were  very  early  user  of  the  MC  68000  micro-procesBor .  That  created  some  problems 
about  availability  of  circuits,  inadequate  documentation  and  development  support  system 
malfunctions.  Especially  in  the  area  of  powerful  support-circuits  promises  seldom  came 
true.  On  the  other  hand  the  68000  product  family  has  really  become  the  industry 
standard  we  expected. 

5  CONCLUSION 

It  has  been  a  successful  approach  to  separate  the  system  in  self contained  functions  and 
have  them  developed  in  parallel. 

Integration  of  these  functions  into  a  high  performance  guidance  and  control  system  has 
been  done  with  few  problems. 

Growth  potential  is  assured  by  the  use  of  industry  standard  components  from  a  family 
that  is  continually  expanding  with  more  powerful  circuits. 

The  guidance  and  control  system  of  the  Penguin  MK3  missile  is  probably  not  a  truly  low 

cost  system.  But  high  performance  at  moderate  cost  is  achieved  by  the  use  of  the 

distributed  architecture  and  standard  processors  an  described  in  thin  paper. 

As  a  final  remark  and  a  trend  example,  it  is  worth  mentioning  that  one  Penguin  MK3 

missile  with  its  adapter  probably  has  more  commputtng  power  than  all  computers  in  the 

F-16A  together. 
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